CVE-2020-9116

2020-11-3023:53:58

huawei

www.cve.org

huawei fusioncompute

command injection

authenticated attacker

remote exploit

insufficient verification

privilege escalation

EPSS

0.002

Percentile

54.7%

JSON

Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege.

CNA Affected

[
  {
    "product": "FusionCompute",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.1,8.0.0"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20201118-01-fusioncompute-en

EPSS

0.002

Percentile

54.7%

JSON

Related for CVELIST:CVE-2020-9116