CVE-2020-9114

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with common privilege may access some specific files and get the administrator privilege in the affected products. Successful exploit will cause privilege escalation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Dec 1, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-91157.2ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerabi CVE-2020-91167.2Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific r CVE-2020-91177.8HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-boun CVE-2020-91186.8There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integ CVE-2020-91196.2There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact th CVE-2020-91207.5CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specifi CVE-2020-91226.5Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause ser CVE-2020-91237.8HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulner CVE-2020-91247.5There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vu CVE-2020-91256.7There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with sp CVE-2020-91276.7Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may injec CVE-2020-91284.4FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerabi