CVE-2020-9209: Medium severity huawei smc 2.0 vulnerability
There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9209?
CVE-2020-9209 is a privilege escalation vulnerability in the SMC2.0 product.
How does CVE-2020-9209 work?
CVE-2020-9209 allows attackers to exploit a directory traversal vulnerability to craft malicious files and escalate privileges.
Which versions of Huawei SMC2.0 Firmware are affected by CVE-2020-9209?
Huawei SMC2.0 Firmware versions v600r006c00spc700 to v600r019c10 are affected by CVE-2020-9209.
What is the severity of CVE-2020-9209?
The severity of CVE-2020-9209 is medium, with a CVSS score of 6.7.
Is there a fix available for CVE-2020-9209?
Yes, Huawei has released a security advisory with information on mitigations and patches for CVE-2020-9209.