CVE-2020-9068

9.8 criticalEPSS 1.1%

Critical (9.8) in huawei ar3200 firmware. EPSS 1.1% chance of exploitation in the next 30 days.

Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:ar3200_firmware

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en

Check your stack JSON