PT-2020-15090 · Huawei · Huawei Pcmanager

Eran Shimony · Published 2020-04-30 · Updated 2021-07-21 · CVE-2020-1817

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei PCManager versions earlier than 10.0.1.36

Description The issue is related to improper permission management of specific files, allowing local attackers with low permissions to inject commands and potentially cause privilege escalation. This can be exploited by attackers to gain elevated access.

Recommendations For versions earlier than 10.0.1.36, update to version 10.0.1.36 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-1817

Affected Products

Huawei Pcmanager

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-pcmanager-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1817 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1817 · Security Note
• https://t.me/cvenotify/3475 · Telegram Post