VULNERABILITY INTELLIGENCE
CVE-2020-9116
CVSS score7.2 HIGH
EPSS probability1.04%
CISA KEVNot currently listed
Published2020-12-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege.
Weakness classification
- nvd@nist.gov: CWE-77
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory