CVSS: 7.5EPSS: 0%CPEs: 20EXPL: 0CVE-2020-9124
https://notcve.org/view.php?id=CVE-2020-9124
There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak. Se presenta una vulnerabilidad de pérdida de memoria en algunas versiones del producto Huawei CloudEngine. Un atacante remoto no autenticado puede explotar esta vulnerabilidad mediante el envío de un mensaje específico al producto afectado. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201223-01-cloudengine-en • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 6.7EPSS: 0%CPEs: 29EXPL: 0CVE-2020-9137
https://notcve.org/view.php?id=CVE-2020-9137
There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation. Se presenta una vulnerabilidad de escalada de privilegios en algunas versiones de CloudEngine 12800, CloudEngine 5800, CloudEngine 6800 y CloudEngine 7800. Debido a una comprobación insuficiente de la entrada, un atacante local con privilegios elevados puede ejecutar algunos scripts especialmente diseñados en los productos afectados. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en • CWE-20: Improper Input Validation •
CVSS: 3.3EPSS: 0%CPEs: 25EXPL: 0CVE-2020-9102
https://notcve.org/view.php?id=CVE-2020-9102
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An attacker with the ability to access the device and cause the username information leak. Affected product versions include: CloudEngine 12800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 5800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800; CloudEngine 6800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R002C50SPC800, V200R003C00SPC810, V200R005C00SPC800, V200R005C10SPC800, V200R019C00SPC800 Se presenta una vulnerabilidad de filtrado de información en algunos productos de Huawei, y podría permitir a un atacante local obtener información. La vulnerabilidad es debido a una administración inapropiada del nombre de usuario. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-informationleak-en •