PT-2024-10866 · Huawei · Huawei Fusioncompute

Published 2024-12-27 · Updated 2025-01-15 · CVE-2020-9222

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei FusionCompute (affected versions not specified)

Description There is a privilege escalation issue in the Huawei FusionCompute product. This is due to insufficient verification on specific files that need to be deserialized, allowing local attackers to exploit this issue and elevate permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-9222

Affected Products

Huawei Fusioncompute

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2020-9222 · Security Note
• https://huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200826-01-fc-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9222 · Vendor Advisory
• https://t.me/cvedetector/13726 · Telegram Post
• https://twitter.com/cracbot/status/1874334800246665317 · Twitter Post
• https://t.me/cvenotify/107462 · Telegram Post
• https://twitter.com/CVEnew/status/1872586810733531378 · Twitter Post