CVE-2020-9085: huawei b612 firmware

csirt@kutim:~/threat-intel/cve/CVE-2020-9085

CVSS 5.3 · Medium EPSS 0,35%

Kerentanan NULL Pointer Dereference pada huawei b612 firmware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

Rincian

Terbit di NVD: 27 Desember 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-476: NULL Pointer Dereference
EPSS (30 hari): 0,35% peluang dieksploitasi; lebih tinggi dari 27,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
huawei	b612 firmware	Versi b612s-25dtcpu-v100r001b192d03sp00c234
huawei	b612 firmware	Versi b612s-25dtcpu-v100r001b192d03sp00c287
huawei	b612 firmware	Versi b612s-25dtcpu-v100r001b192d05sp00c00

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.