CVE-2020-9115

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-77

Affected software

Vendor	Product	Versions
n/a	ManageOne	6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.1.B050,8.0.0,8.0.1

References

Timeline

Published: Dec 1, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-91167.2Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific r CVE-2020-91177.8HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-boun CVE-2020-91186.8There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integ CVE-2020-91196.2There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact th CVE-2020-91207.5CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specifi CVE-2020-91226.5Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause ser CVE-2020-91237.8HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulner CVE-2020-91247.5There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vu CVE-2020-91256.7There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with sp CVE-2020-91276.7Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may injec CVE-2020-91284.4FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerabi CVE-2020-91296.7HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions