Improper validation of integrity check value in Huawei Myna
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2020-9210 |
| CWE-ID | CWE-354 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Huawei Myna Other software / Other software solutions |
| Vendor | Huawei |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Improper validation of integrity check value
EUVDB-ID: #VU49564
Risk: Low
CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-9210
CWE-ID:
CWE-354 - Improper Validation of Integrity Check Value
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to a module does not perform sufficient integrity check. An attacker with physical access can install malware and compromise normal service of the affected device.
MitigationInstall updates from vendor's website.
Vulnerable software versionsHuawei Myna: 9.0.1.11(H100SP8C00)
External linkshttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210106-01-myna-en
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
