1. Home
  2. CVE Database
  3. CVE-2020-9207
HIGH · 7.8

CVE-2020-9207

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting...

Vulnerability Description

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiCloudengine 12800 Firmwarev200r019c00spc800
HuaweiCloudengine 12800-
HuaweiCloudengine 5800 Firmwarev200r019c00spc800
HuaweiCloudengine 5800-
HuaweiCloudengine 6800 Firmwarev200r005c20spc800
HuaweiCloudengine 6800-
HuaweiCloudengine 7800 Firmwarev200r019c00spc800
HuaweiCloudengine 7800-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2020-9207?

CVE-2020-9207 is a vulnerability with a CVSS score of 7.8 (HIGH). There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting...

How severe is CVE-2020-9207?

CVE-2020-9207 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-9207?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 12800 Firmware, Huawei Cloudengine 12800, Huawei Cloudengine 5800 Firmware, Huawei Cloudengine 5800, Huawei Cloudengine 6800 Firmware.