CVE-2020-1811

2020-02-1723:28:49

huawei

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

JSON

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

CNA Affected

[
  {
    "product": "GaussDB 200",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.1"
      }
    ]
  }
]