Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9199

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.

Published

2020-09-03T18:15:15.223

Last Modified

2024-11-21T05:40:08.770

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

5.1

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei b2368-22_firmware v100r001c00 Yes
Hardware huawei b2368-22 - No
Operating System huawei b2368-57_firmware v100r001c00 Yes
Hardware huawei b2368-57 - No
Operating System huawei b2368-66_firmware v100r001c00 Yes
Hardware huawei b2368-66 - No
References