CVEvulnerability

CVE-2020-9209

6.7 MEDIUM Published 2021-01-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-862

Description

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.

Affected configurations

• huawei smc2.0 firmware v600r006c00spc700 • huawei smc2.0 firmware v600r006c00spc800 • huawei smc2.0 firmware v600r006c10spc500 • huawei smc2.0 firmware v600r006c10spc600 • huawei smc2.0 firmware v600r006c10spc601 • huawei smc2.0 firmware v600r006c10spc602 • huawei smc2.0 firmware v600r006c10spc700 • huawei smc2.0 firmware v600r006c10spc800 • huawei smc2.0 firmware v600r006c10spca00 • huawei smc2.0 firmware v600r006c10spcb00 • huawei smc2.0 firmware v600r006c10spcc00 • huawei smc2.0 firmware v600r006c10spcd00 • huawei smc2.0 firmware v600r006c10spce00 • huawei smc2.0 firmware v600r019c00 • huawei smc2.0 firmware v600r019c10

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References