CVE-2020-9207

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-92086.5There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers witho CVE-2020-92096.7There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not a CVE-2020-92106.8There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scen CVE-2020-92117.2There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can e CVE-2020-92126.5There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The at CVE-2020-92137.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an a CVE-2020-92227.8There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need CVE-2020-92237.5There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote CVE-2020-92257.8FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assi CVE-2020-92265.5HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. The system does not im CVE-2020-92275.5Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker t CVE-2020-92287.5FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploi