CVE-2020-9127

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Nov 13, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-91284.4FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerabiCVE-2020-91296.7HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictionsCVE-2020-91376.7There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. CVE-2020-91385.3There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exCVE-2020-91399.1There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory accesCVE-2020-91409.8There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code executCVE-2020-91419.1There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause inCVE-2020-91429.1There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap ovCVE-2020-91435.3There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensCVE-2020-91449.8There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to imCVE-2020-91459.1There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability may cause out-of-bounCVE-2020-91465.5A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to
CVE-2020-9127: Medium severity, CVSS 6.7 | Vulnix