medium6.7
CVE-2020-9137
There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800.
Impact
There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Cloudengine 12800 Firmware | Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800, v200r019c10spc800 |
| Huawei | Cloudengine 5800 Firmware | Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800, v200r019c10spc800 |
| Huawei | Cloudengine 6800 Firmware | Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r005c20spc800, v200r019c00spc800 |
| Huawei | Cloudengine 7800 Firmware | Versions v200r002c50spc800, v200r003c00spc810, v200r005c00spc800, v200r005c10spc800, v200r019c00spc800, v200r019c10spc800 |