There is an information leakage vulnerability in some Huawei products.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Timeline
- CVE published1,536 days (about 4 years)
- Record last updated
Affected versions
- HUAWEI Anne-AL00
earlier than 9.1.0.331(C675E9R1P3T8)
- HUAWEI Berkeley-L09
earlier than 10.0.1.1(C675R1)
- HUAWEI CD16-10
earlier than 10.0.2.8
- HUAWEI CD17-10
earlier than 10.0.2.8
- HUAWEI CD17-16
earlier than 10.0.2.8
- HUAWEI CD18-10
earlier than 10.0.2.8
- HUAWEI CD18-16
earlier than 10.0.2.8
- HUAWEI Columbia-TL00B
earlier than 9.0.0.187(C01E181R1P20T8)
- HUAWEI E6878-370
earlier than 10.0.5.1(H610SP10C00)
- HUAWEI HUAWEI P30 lite
earlier than 10.0.0.185(C605E3R1P3), earlier than 10.0.0.197(C432E8R2P7)
- HUAWEI HUAWEI nova 4e
earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Honor 10 Lite
9.0.1.113(C675E11R1P12)
- HUAWEI LelandP-L22A
earlier than 9.1.0.166(C675E5R1P4T8)
- HUAWEI Marie-AL00AX
earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-AL00AY
earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-AL00BX
earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-L03BX
earlier than 10.0.0.188(C605E5R1P1)
- HUAWEI Marie-L21BX
earlier than 10.0.0.188(C432E4R4P1), earlier than 10.0.0.188(C461E5R3P1)
- HUAWEI Marie-L22BX
earlier than 10.0.0.188(C636E3R3P1)
- HUAWEI Marie-L23BX
earlier than 10.0.0.188(C605E5R1P1)
- HUAWEI TC5200-16
earlier than 10.0.2.8
- HUAWEI WS5200-11
earlier than 10.0.2.8
- HUAWEI WS5200-12
earlier than 10.0.2.23
- HUAWEI WS5200-16
earlier than 10.0.2.8
- HUAWEI WS5200-17
earlier than 10.0.2.23
- HUAWEI WS5800-10
earlier than 10.0.3.27
- HUAWEI WS6500-10
earlier than 10.0.2.8
- HUAWEI WS6500-16
earlier than 10.0.2.8