Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9209

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.

Published

2021-01-13T23:15:13.807

Last Modified

2024-11-21T05:40:10.383

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei smc2.0_firmware v600r006c00spc700 Yes
Operating System huawei smc2.0_firmware v600r006c00spc800 Yes
Operating System huawei smc2.0_firmware v600r006c10spc500 Yes
Operating System huawei smc2.0_firmware v600r006c10spc600 Yes
Operating System huawei smc2.0_firmware v600r006c10spc601 Yes
Operating System huawei smc2.0_firmware v600r006c10spc602 Yes
Operating System huawei smc2.0_firmware v600r006c10spc700 Yes
Operating System huawei smc2.0_firmware v600r006c10spc800 Yes
Operating System huawei smc2.0_firmware v600r006c10spca00 Yes
Operating System huawei smc2.0_firmware v600r006c10spcb00 Yes
Operating System huawei smc2.0_firmware v600r006c10spcc00 Yes
Operating System huawei smc2.0_firmware v600r006c10spcd00 Yes
Operating System huawei smc2.0_firmware v600r006c10spce00 Yes
Operating System huawei smc2.0_firmware v600r019c00 Yes
Operating System huawei smc2.0_firmware v600r019c10 Yes
Hardware huawei smc2.0 - No
References