{"id":"CVE-2020-9206","aliases":["EUVD-2020-30035","GHSA-7j3j-77m4-qcrp"],"status":"published","title":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege...","description":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00192,"percentile":0.08892,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-03-22T17:35:25Z","modified":"2026-06-17T03:27:34Z","products":[{"vendor":"huawei","product":"eudc660_firmware"}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-resourcemanagement-en","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9206"},{"url":"https://github.com/advisories/GHSA-7j3j-77m4-qcrp"}],"sources":{"cve":[{"id":"CVE-2020-9206","description":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.","status":"published","published":"2021-03-22T17:35:25Z","modified":"2024-08-04T10:19:20.087Z","updated_at":"2026-11-02T14:35:49.209579Z"}],"euvd":[{"id":"EUVD-2020-30035","description":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.","status":"published","published":"2021-03-22T17:35:25Z","modified":"2024-08-04T10:19:20Z","updated_at":"2026-11-03T03:07:54.599277Z"}],"ghsa":[{"id":"GHSA-7j3j-77m4-qcrp","title":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege...","description":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.","status":"published","published":"2022-05-24T17:44:59Z","modified":"2023-01-29T05:05:43Z","updated_at":"2026-11-02T14:45:51.862752Z"}],"nvd":[{"id":"CVE-2020-9206","description":"The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.","status":"published","published":"2021-03-22T18:15:14.167Z","modified":"2026-06-17T03:27:34.917Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}