Authentication flaw

2020-12-2918:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

CPENameOperatorVersion
cloudengine_12800_firmwareeq200r19c0spc800-v
cloudengine_5800_firmwareeq200r19c0spc800-v
cloudengine_6800_firmwareeq200r5c20spc800-v
cloudengine_6800_firmwareeq200r19c0spc800-v
cloudengine_7800_firmwareeq200r19c0spc800-v

Name	Operator	Version
cloudengine_12800_firmware	eq	200r19c0spc800-v
cloudengine_5800_firmware	eq	200r19c0spc800-v
cloudengine_6800_firmware	eq	200r5c20spc800-v
cloudengine_6800_firmware	eq	200r19c0spc800-v
cloudengine_7800_firmware	eq	200r19c0spc800-v