CVE-2020-9116: Command Injection
Published Nov 30, 2020
·Updated
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege.
Affected Software
2 affected components
huawei FusionCompute=6.5.1
huawei FusionCompute=8.0.0
Event History
Nov 30, 2020
CVE Published
via MITRE·11:53 PM
Data Sourced
via MITRE·11:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this command injection vulnerability in Huawei FusionCompute?
The vulnerability ID is CVE-2020-9116.
2
What versions of Huawei FusionCompute are affected by this command injection vulnerability?
Versions 6.5.1 and 8.0.0 of Huawei FusionCompute are affected by this vulnerability.
3
How can an attacker exploit this vulnerability?
An authenticated, remote attacker can craft specific requests to exploit this vulnerability.
4
What is the severity of CVE-2020-9116?
The severity of CVE-2020-9116 is high with a CVSS score of 7.2.
5
How can I fix this command injection vulnerability in Huawei FusionCompute?
To fix this vulnerability, it is recommended to apply the security patch provided by Huawei. Please refer to the official security advisory for more details.