Out-Of-Bounds Read and Write Vulnerability in HUAWEI nova 4 and SydneyM-AL00 Products

CVE-2020-9117

Summary

Certain versions of the HUAWEI nova 4 and SydneyM-AL00 are vulnerable to an out-of-bounds read and write issue. This vulnerability allows an attacker with specific permissions to craft a malformed packet containing specific parameters. When this packet is sent to the affected devices, it leads to insufficient validation, which can result in information leakage and the potential for arbitrary code execution. It's important for users of these devices to be aware of this vulnerability and take necessary precautions.

References