{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-05T14:26:11.091","vulnerabilities":[{"cve":{"id":"CVE-2020-9118","sourceIdentifier":"psirt@huawei.com","published":"2021-02-06T02:15:12.477","lastModified":"2026-06-17T03:27:31.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-00 versions 9.0.3.1(H100SP13C00),9.0.3.1(H100SP18C00),9.0.3.1(H100SP3C00),9.0.3.1(H100SP9C00),9.0.3.2(H100SP1C00),9.0.3.2(H100SP2C00),9.0.3.2(H100SP5C00),9.0.3.2(H100SP8C00),9.0.3.3(H100SP1C00)."},{"lang":"es","value":"Se presenta una vulnerabilidad de comprobación insuficiente de la integridad en el producto Sound X de Huawei. El sistema no comprueba suficientemente la integridad de determinados paquetes de software. Una explotación con éxito podría permitir a un atacante cargar un paquete de software diseñado en el dispositivo. Unas versiones de producto afectadas incluyen: AIS-BW80H-00 versiones 9.0.3.1 (H100SP13C00), 9.0.3.1 (H100SP18C00), 9.0.3.1 (H100SP3C00), 9.0.3.1 (H100SP9C00), 9.0.3.2 (H100SP1C00), 9.0.3.2 ( H100SP2C00), 9.0.3.2 (H100SP5C00), 9.0.3.2 (H100SP8C00), 9.0.3.3 (H100SP1C00)"}],"affected":[{"source":"psirt@huawei.com","affectedData":[{"vendor":"n/a","product":"AIS-BW80H-00","versions":[{"version":"9.0.3.1(H100SP13C00),9.0.3.1(H100SP18C00),9.0.3.1(H100SP3C00),9.0.3.1(H100SP9C00),9.0.3.2(H100SP1C00),9.0.3.2(H100SP2C00),9.0.3.2(H100SP5C00),9.0.3.2(H100SP8C00),9.0.3.3(H100SP1C00)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-354"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.1\\(h100sp3c00\\):*:*:*:*:*:*:*","matchCriteriaId":"CD80C36A-9578-4D4E-A7D4-6B6EF698A08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.1\\(h100sp9c00\\):*:*:*:*:*:*:*","matchCriteriaId":"A67D0718-E24E-4B52-B6C5-407A4002B139"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.1\\(h100sp13c00\\):*:*:*:*:*:*:*","matchCriteriaId":"106C2263-2C07-481A-A902-0B639254E91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.1\\(h100sp18c00\\):*:*:*:*:*:*:*","matchCriteriaId":"7322BA99-72F2-44B4-90B8-CFFF1E96AC82"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.2\\(h100sp1c00\\):*:*:*:*:*:*:*","matchCriteriaId":"01A8C906-E443-45B3-97C0-6C7142873E3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.2\\(h100sp2c00\\):*:*:*:*:*:*:*","matchCriteriaId":"F713DA59-B422-4DB4-8048-B11BA9467527"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.2\\(h100sp5c00\\):*:*:*:*:*:*:*","matchCriteriaId":"C1762EF9-4282-4E44-BA91-6027FADFEE6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.2\\(h100sp8c00\\):*:*:*:*:*:*:*","matchCriteriaId":"1C6820C1-B9F9-49D6-80FE-B8BFA8658D12"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:ais-bw80h-00_firmware:9.0.3.3\\(h100sp1c00\\):*:*:*:*:*:*:*","matchCriteriaId":"BD9772B9-C207-4EB5-A89C-BA198B758B9F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:huawei:ais-bw80h-00:-:*:*:*:*:*:*:*","matchCriteriaId":"11FA0E49-5801-44FD-86F9-425FC1431BC5"}]}]}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-ais-en","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-ais-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}