CVE-2020-9137

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.

CVSS v3 6.7 MEDIUM
CVSS v2.0 4.6 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en	Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r003c00spc810:::::::*
	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c10spc800:::::::*

cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r002c50spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r003c00spc810:::::::*
	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c10spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c10spc800:::::::*

cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r002c50spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r003c00spc810:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c10spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c20spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c10spc800:::::::*

cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

OR	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r002c50spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r003c00spc810:::::::*
	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c10spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c00spc800:::::::*
	cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c10spc800:::::::*

cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:40

Type	Values Removed	Values Added
References	~~() https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en - Vendor Advisory~~	() https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en - Vendor Advisory

Information

Published : 2020-12-24 16:15

Updated : 2024-11-21 05:40

NVD link : CVE-2020-9137

Mitre link : CVE-2020-9137

CVE.ORG link : CVE-2020-9137

JSON object : View

Products Affected

huawei

cloudengine_5800
cloudengine_5800_firmware
cloudengine_6800_firmware
cloudengine_12800
cloudengine_6800
cloudengine_7800_firmware
cloudengine_7800
cloudengine_12800_firmware

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2020-9137", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2020-12-24T16:15:16.037", "references": [{"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de escalada de privilegios en algunas versiones de CloudEngine 12800, CloudEngine 5800, CloudEngine 6800 y CloudEngine 7800. Debido a una comprobaci\u00f3n insuficiente de la entrada, un atacante local con privilegios elevados puede ejecutar algunos scripts especialmente dise\u00f1ados en los productos afectados. Una explotaci\u00f3n con \u00e9xito podr\u00eda causar una escalada de privilegios"}], "lastModified": "2024-11-21T05:40:06.687", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2A1D568-48C6-4CE4-8CD2-93F79F484448"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r003c00spc810:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32438232-3341-4056-B801-AA8F0F9E8DEC"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32EF3B57-0B07-40C0-943D-2C21EEE4D747"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6A9B879-DBF0-4F31-9BF8-7148BC2FCED5"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "067ADFDC-B001-4270-9CA2-37F670B3BFAC"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r019c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2601F8EC-A011-4614-80CA-3A01D80D9B7B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE8A2875-0F7E-4790-A925-5999396B7578"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r002c50spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C78467A9-4091-4710-BFB8-A6FB0606BDF5"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r003c00spc810:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB2923DC-9667-46F3-B879-C8C1DAECCC6F"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BA3C214-FBB1-428A-8C0B-DF797296FC0E"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38CAD360-6AD5-4714-91BE-0AAB516EDA79"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCFEB001-EFF7-47AC-B67E-7B807780F009"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r019c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7B76265-8C33-43A6-AAA7-7521B95F1C57"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r002c50spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7D33183-3C97-4EA6-90F7-55ED36F710E5"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r003c00spc810:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA5CC84F-27DD-4D5E-8F28-CD7D12EAD2D7"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F5DDE2E-B7B3-4D7A-A3EA-C15F968F1186"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "369FD60C-215C-4172-9CFC-39AD5492BE17"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c20spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAC7C877-066F-4FB8-9AB7-D038CE6E5D8D"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D96A7C4-88BE-4353-AC75-AF6841EEB6F9"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r019c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "542A16DF-B995-417E-AE19-DFF9CC499D7B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r002c50spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14C55E1D-E4E8-4E8F-8D3E-E3A72C5A45D8"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r003c00spc810:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70D64B7D-AA9B-476B-8389-617799BAC702"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72424532-AB07-47DF-8301-275D6EC2F6D9"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4196899F-1AB3-429A-B334-3B059DFBCAFD"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c00spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA12B395-7D70-445A-B0FD-47363787D1EE"}, {"criteria": "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r019c10spc800:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "512A374E-09BE-4ACD-9F87-C1752C882778"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@huawei.com"}

6.7 /10