CVE-2020-9199

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Sep 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-92007.8There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vul CVE-2020-92016.5There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the en CVE-2020-92024.4There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage o CVE-2020-92033.3There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing CVE-2020-92054.9There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some op CVE-2020-92066.7The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit CVE-2020-92077.8There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file pr CVE-2020-92086.5There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers witho CVE-2020-92096.7There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not a CVE-2020-92106.8There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scen CVE-2020-92117.2There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can e CVE-2020-92126.5There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The at