Vulnerability Details CVE-2020-9071
                There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.002
                        
                    
                    
                        
                            EPSS Ranking 38.3%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 6.5
                        
                    
                    
                        
                            CVSS v2 Score 4.0
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2020-9071
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar120-s:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar1200-s:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar1200:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar150-s:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar200-s:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar2200-s:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar2200:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar3200:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:ar3600:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:netengine16ex:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:srg1300:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:srg2300:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:h:huawei:srg3300:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spca00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spca00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar1200_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar150_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar160_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar160_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar160_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar160_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar200_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spca00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar2200_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spca00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3200_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3600_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3600_firmware:v200r007c00spc900pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3600_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3600_firmware:v200r007c00spcb00pwe
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar3600_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:ar510_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:netengine16ex_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg1300_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg2300_firmware:v200r007c00spcc00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spc900
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spcb00
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:huawei:srg3300_firmware:v200r007c00spcc00