CVEvulnerability

CVE-2020-9100

7.8 HIGH Published 2020-07-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing.

Affected configurations

• huawei hisuite (< 10.1.0.500)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References