CVE-2020-9209

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-92106.8There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scen CVE-2020-92117.2There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can e CVE-2020-92126.5There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The at CVE-2020-92137.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an a CVE-2020-92227.8There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need CVE-2020-92237.5There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote CVE-2020-92257.8FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. The software does not correctly perform a privilege assi CVE-2020-92265.5HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P11) have an improper signature verification vulnerability. The system does not im CVE-2020-92275.5Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker t CVE-2020-92287.5FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploi CVE-2020-92294.4FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploi CVE-2020-92306.5WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit