VULNERABILITY INTELLIGENCE
CVE-2020-9100
CVSS score7.8 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2020-07-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing.
Weakness classification
- nvd@nist.gov: CWE-427
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory