{"id":"CVE-2020-9071","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-9071","generatedAt":"2026-10-28T00:32:34.650Z","title":"There is a few bytes out-of-bounds read vulnerability in some Huawei products.","description":"There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00","published":"2020-06-01T15:15:15.000Z","lastModified":"2026-06-17T03:27:27.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-125"],"affected":["huawei/ar120-s firmware","huawei/ar1200 firmware","huawei/ar1200-s firmware","huawei/ar150 firmware","huawei/ar150-s firmware","huawei/ar160 firmware","huawei/ar200 firmware","huawei/ar200-s firmware","huawei/ar2200 firmware","huawei/ar2200-s firmware","huawei/ar3200 firmware","huawei/ar3600 firmware","huawei/ar510 firmware","huawei/netengine16ex firmware","huawei/srg1300 firmware","huawei/srg2300 firmware","huawei/srg3300 firmware"],"epss":{"score":0.00634,"percentile":0.50116,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.63%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-9071","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}