Read the docs
TI-2020-07280 Aliases CVE-2020-9067GHSA-g4g6-2v6v-6j9q

Buffer overflow in SmartAX MA5600T

Priority LOW 36CWE-120Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.

Why it matters now

EPSS 0.00617 49th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—SmartAX MA5600TV800R013C10; V800R015C00; V800R015C10; V800R017C00; V800R017C10; V800R018C00; V800R018C10—No fix listedCNA
—SmartAX MA5800V100R017C00; V100R017C10; V100R018C00; V100R018C10; V100R019C10—No fix listedCNA
—SmartAX EA5800V100R018C00; V100R018C10; V100R019C10—No fix listedCNA
  • SmartAX MA5600T Vendor— Affected V800R013C10; V800R015C00; V800R015C10; V800R017C00; V800R017C10; V800R018C00; V800R018C10 Fixed in — No fix listed CNA
  • SmartAX MA5800 Vendor— Affected V100R017C00; V100R017C10; V100R018C00; V100R018C10; V100R019C10 Fixed in — No fix listed CNA
  • SmartAX EA5800 Vendor— Affected V100R018C00; V100R018C10; V100R019C10 Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r013c10:*:*:*:*:*:*:*v800r013c10VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c00:*:*:*:*:*:*:*v800r015c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c10:*:*:*:*:*:*:*v800r015c10VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c00:*:*:*:*:*:*:*v800r017c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c10:*:*:*:*:*:*:*v800r017c10VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c00:*:*:*:*:*:*:*v800r018c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c10:*:*:*:*:*:*:*v800r018c10VulnerableHuawei
cpe:2.3:h:huawei:smartax_ma5600t:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c00:*:*:*:*:*:*:*v100r017c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c10:*:*:*:*:*:*:*v100r017c10VulnerableHuawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r013c10:*:*:*:*:*:*:* Versions v800r013c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c00:*:*:*:*:*:*:* Versions v800r015c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r015c10:*:*:*:*:*:*:* Versions v800r015c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c00:*:*:*:*:*:*:* Versions v800r017c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r017c10:*:*:*:*:*:*:* Versions v800r017c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c00:*:*:*:*:*:*:* Versions v800r018c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5600t_firmware:v800r018c10:*:*:*:*:*:*:* Versions v800r018c10 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:smartax_ma5600t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c00:*:*:*:*:*:*:* Versions v100r017c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r017c10:*:*:*:*:*:*:* Versions v100r017c10 Vulnerable ·Huawei
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c00:*:*:*:*:*:*:*v100r018c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c10:*:*:*:*:*:*:*v100r018c10VulnerableHuawei
cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r019c10:*:*:*:*:*:*:*v100r019c10VulnerableHuawei
cpe:2.3:h:huawei:smartax_ma5800:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c00:*:*:*:*:*:*:*v100r018c00VulnerableHuawei
cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c10:*:*:*:*:*:*:*v100r018c10VulnerableHuawei
cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r019c10:*:*:*:*:*:*:*v100r019c10VulnerableHuawei
cpe:2.3:h:huawei:smartax_ea5800:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c00:*:*:*:*:*:*:* Versions v100r018c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r018c10:*:*:*:*:*:*:* Versions v100r018c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ma5800_firmware:v100r019c10:*:*:*:*:*:*:* Versions v100r019c10 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:smartax_ma5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c00:*:*:*:*:*:*:* Versions v100r018c00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r018c10:*:*:*:*:*:*:* Versions v100r018c10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:smartax_ea5800_firmware:v100r019c10:*:*:*:*:*:*:* Versions v100r019c10 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:smartax_ea5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-9067
  2. 2026-10-03 Alias added: GHSA-g4g6-2v6v-6j9q

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences