PT-2020-20473 · Huawei · Osd

Jinwei Chen · Published 2020-04-27 · Updated 2021-07-21 · CVE-2020-9072

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei OSD product versions prior to 9.0.32.0

Description The issue allows an authenticated, local attacker to construct a specific file path, potentially leading to local privilege escalation. Successful exploitation may result in the attacker obtaining higher privileges.

Recommendations For versions prior to 9.0.32.0, update to version 9.0.32.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-9072

Affected Products

Osd

References · 3

• https://osv.dev/vulnerability/CVE-2020-9072 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9072 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-osd-en · Vendor Advisory