There is an information leakage vulnerability in some Huawei products.

published 2020-05-21 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-29898

cvss: 6.5; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 27%
public exploits: 0; none known

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8

Patch / fix

fixed in 18

huawei anne-al00_firmware 9.1.0.331\(c675e9r1p3t8\)
huawei berkeley-l09_firmware 10.0.1.1\(c675r1\)
huawei cd16-10_firmware 10.0.2.8
huawei cd17-10_firmware 10.0.2.8
huawei cd17-16_firmware 10.0.2.8
huawei cd18-10_firmware 10.0.2.8
huawei cd18-16_firmware 10.0.2.8
huawei columbia-tl00b_firmware 9.0.0.187\(c01e181r1p20t8\)
huawei e6878-370_firmware 10.0.5.1\(h610sp10c00\)
huawei honor_10_lite_firmware 10.0.0.182\(c675e17r2p2\)
huawei lelandp-l22a_firmware 9.1.0.166\(c675e5r1p4t8\)
huawei tc5200-16_firmware 10.0.2.8
huawei ws5200-11_firmware 10.0.2.8, 10.0.2.23
huawei ws5200-16_firmware 10.0.2.8
huawei ws5200-17_firmware 10.0.2.23
huawei ws5800-10_firmware 10.0.3.27
huawei ws6500-10_firmware 10.0.2.8
huawei ws6500-16_firmware 10.0.2.8

Exploit prediction

0.34% chance of exploitation in the next 30 days, higher than 27% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.1	6.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD	2.0	3.3	AV:A/AC:L/Au:N/C:P/I:N/A:N

Affected products

HUAWEI Anne-AL00
HUAWEI Berkeley-L09
HUAWEI CD16-10
HUAWEI CD17-10
HUAWEI CD17-16
HUAWEI CD18-10
HUAWEI CD18-16
HUAWEI Columbia-TL00B
HUAWEI E6878-370
HUAWEI HUAWEI P30 lite
HUAWEI HUAWEI nova 4e
HUAWEI Honor 10 Lite
HUAWEI LelandP-L22A
HUAWEI Marie-AL00AX
HUAWEI Marie-AL00AY
HUAWEI Marie-AL00BX
HUAWEI Marie-L03BX
HUAWEI Marie-L21BX
HUAWEI Marie-L22BX
HUAWEI Marie-L23BX
HUAWEI TC5200-16
HUAWEI WS5200-11
HUAWEI WS5200-12
HUAWEI WS5200-16
HUAWEI WS5200-17
HUAWEI WS5800-10
HUAWEI WS6500-10
HUAWEI WS6500-16

References

huawei.com /en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en
vendor-advisory

Sources

CVE List CVE-2020-9069
NVD CVE-2020-9069

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary