CVE-2020-9137

🗓️ 24 Dec 2020 15:47:56Reported by huaweiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 69 Views

Privilege escalation vulnerability in CloudEngine 12800, 5800, 6800, and 7800

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-9137	24 Dec 202018:55	–	circl
CNNVD	Input Validation Error Vulnerability in Some Huawei Products	2 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-9137	24 Dec 202015:47	–	cvelist
EUVD	EUVD-2020-29966	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Privilege Escalation Vulnerability in Some Huawei Products	2 Dec 202000:00	–	huawei
NCSC	Vulnerabilities fixed in Huawei CloudEngine switches	29 Dec 202000:00	–	ncsc
NVD	CVE-2020-9137	24 Dec 202016:15	–	nvd
OpenVAS	Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20201202-02-privilege)	21 Dec 202300:00	–	openvas
Prion	Privilege escalation	24 Dec 202016:15	–	prion
RedhatCVE	CVE-2020-9137	22 May 202516:53	–	redhatcve

NVD

Vulners

Node

huawei cloudengine_12800_firmwareMatchv200r002c50spc800

huawei cloudengine_12800_firmwareMatchv200r003c00spc810

huawei cloudengine_12800_firmwareMatchv200r005c00spc800

huawei cloudengine_12800_firmwareMatchv200r005c10spc800

huawei cloudengine_12800_firmwareMatchv200r019c00spc800

huawei cloudengine_12800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_12800Match-

Node

huawei cloudengine_5800_firmwareMatchv200r002c50spc800

huawei cloudengine_5800_firmwareMatchv200r003c00spc810

huawei cloudengine_5800_firmwareMatchv200r005c00spc800

huawei cloudengine_5800_firmwareMatchv200r005c10spc800

huawei cloudengine_5800_firmwareMatchv200r019c00spc800

huawei cloudengine_5800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_5800Match-

Node

huawei cloudengine_6800_firmwareMatchv200r002c50spc800

huawei cloudengine_6800_firmwareMatchv200r003c00spc810

huawei cloudengine_6800_firmwareMatchv200r005c00spc800

huawei cloudengine_6800_firmwareMatchv200r005c10spc800

huawei cloudengine_6800_firmwareMatchv200r005c20spc800

huawei cloudengine_6800_firmwareMatchv200r019c00spc800

huawei cloudengine_6800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_6800Match-

Node

huawei cloudengine_7800_firmwareMatchv200r002c50spc800

huawei cloudengine_7800_firmwareMatchv200r003c00spc810

huawei cloudengine_7800_firmwareMatchv200r005c00spc800

huawei cloudengine_7800_firmwareMatchv200r005c10spc800

huawei cloudengine_7800_firmwareMatchv200r019c00spc800

huawei cloudengine_7800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_7800Match-

[
  {
    "product": "CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800"
      },
      {
        "status": "affected",
        "version": "V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en

21 Nov 2024 05:40Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.6

CVSS 3.16.7

EPSS0.00026

CWE-20