CVSS: 6.7EPSS: 0%CPEs: 29EXPL: 0CVE-2020-9137
https://notcve.org/view.php?id=CVE-2020-9137
There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation. Se presenta una vulnerabilidad de escalada de privilegios en algunas versiones de CloudEngine 12800, CloudEngine 5800, CloudEngine 6800 y CloudEngine 7800. Debido a una comprobación insuficiente de la entrada, un atacante local con privilegios elevados puede ejecutar algunos scripts especialmente diseñados en los productos afectados. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en • CWE-20: Improper Input Validation •
CVSS: 3.3EPSS: 0%CPEs: 25EXPL: 0CVE-2020-9102
https://notcve.org/view.php?id=CVE-2020-9102
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800 Se presenta una vulnerabilidad de filtrado de información en algunos productos de Huawei, y podría permitir a un atacante local obtener información. La vulnerabilidad es debido a una administración inapropiada del nombre de usuario. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-informationleak-en •