Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have…

Description

Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

Scores

EPSS (exploitation in 30 days)

1.1% · top 34% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

• Improper Authentication
• CWE-287 (opens in a new tab)All about CWE-287 and its CVEs

Affected products

• Huawei · AR3200

  • affected V200R007C00SPC900
  • affected V200R007C00SPCa00
  • affected V200R007C00SPCb00
  • affected V200R007C00SPCc00
  • affected V200R009C00SPC500

References (1)

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-9068](https://trackcve.app/badge/CVE-2020-9068.svg)](https://trackcve.app/cve/CVE-2020-9068)

Record last updated 4 Aug 2024, 10:19 UTC.