TI-2020-07298 Aliases CVE-2020-9085 GHSA-v55h-fmcq-hv7v

NULL pointer dereference in HUAWEI 4G Router B612

LOW 30CWE-476Published 2024-12-27 · Updated 2024-12-27

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-476.

Summary

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00354 29th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Huawei	HUAWEI 4G Router B612	B612s-25dTCPU-V100R001B192D03SP00C234; B612s-25dTCPU-V100R001B192D03SP00C287; B612s-25dTCPU-V100R001B192D05SP00C00	—	No fix listed	CNA

HUAWEI 4G Router B612 VendorHuawei Affected B612s-25dTCPU-V100R001B192D03SP00C234; B612s-25dTCPU-V100R001B192D03SP00C287; B612s-25dTCPU-V100R001B192D05SP00C00 Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:::::::*	b612s-25dtcpu-v100r001b192d03sp00c234	Vulnerable	Huawei
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:::::::*	b612s-25dtcpu-v100r001b192d03sp00c287	Vulnerable	Huawei
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:::::::*	b612s-25dtcpu-v100r001b192d05sp00c00	Vulnerable	Huawei
cpe:2.3:h:huawei:b612:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c234:*:*:*:*:*:*:* Versions b612s-25dtcpu-v100r001b192d03sp00c234 Vulnerable ·Huawei
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d03sp00c287:*:*:*:*:*:*:* Versions b612s-25dtcpu-v100r001b192d03sp00c287 Vulnerable ·Huawei
cpe:2.3:o:huawei:b612_firmware:b612s-25dtcpu-v100r001b192d05sp00c00:*:*:*:*:*:*:* Versions b612s-25dtcpu-v100r001b192d05sp00c00 Vulnerable ·Huawei
cpe:2.3:h:huawei:b612:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-9085
2026-10-03 Alias added: GHSA-v55h-fmcq-hv7v

References

Advisory 1

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en

TI-2020-07299 Out-of-bounds write in HUAWEI 4G Router B612 CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences