medium6.7
CVE-2020-9072
Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability.
Impact
Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Osd Firmware | before osd_uwp_9.0.32.0 |