CVE-2020-9207

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-29 · updated 2026-06-17
Weakness: CWE-287

Description

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

Affected products

CloudEngine 12800: v200r019c00spc800
CloudEngine 5800: v200r019c00spc800
Huawei Cloudengine 6800 Firmware: v200r005c20spc800, v200r019c00spc800
Huawei Cloudengine 7800 Firmware: v200r019c00spc800

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-en

Get alerted when CVE-2020-9207 or the next vulnerability affects your stack