CVE-2020-9137

🗓️ 24 Dec 2020 16:15:16Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

Privilege escalation vulnerability in CloudEngin

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-9137	24 Dec 202018:55	–	circl
CNNVD	Input Validation Error Vulnerability in Some Huawei Products	2 Dec 202000:00	–	cnnvd
CVE	CVE-2020-9137	24 Dec 202015:47	–	cve
Cvelist	CVE-2020-9137	24 Dec 202015:47	–	cvelist
EUVD	EUVD-2020-29966	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Privilege Escalation Vulnerability in Some Huawei Products	2 Dec 202000:00	–	huawei
NCSC	Vulnerabilities fixed in Huawei CloudEngine switches	29 Dec 202000:00	–	ncsc
OpenVAS	Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20201202-02-privilege)	21 Dec 202300:00	–	openvas
OSV	CVE-2020-9137	24 Dec 202016:15	–	osv
Prion	Privilege escalation	24 Dec 202016:15	–	prion

NVD

Node

huawei cloudengine_12800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_12800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_12800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_12800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_12800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_12800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_12800Match-

Node

huawei cloudengine_5800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_5800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_5800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_5800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_5800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_5800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_5800Match-

Node

huawei cloudengine_6800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_6800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_6800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_6800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_6800_firmwareMatchv200r005c20spc800

OR

huawei cloudengine_6800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_6800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_6800Match-

Node

huawei cloudengine_7800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_7800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_7800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_7800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_7800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_7800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_7800Match-

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en

21 Nov 2024 05:40Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.6

CVSS 3.16.7

EPSS0.00026

cve-2020-9137 privilege escalation cloudengine 12800 cloudengine 5800 cloudengine 6800 cloudengine 7800 insufficient input validation local attacker specially crafted scripts successful exploit