PT-2024-10867 · Huawei · Fusioncompute

Published 2024-12-27 · Updated 2025-01-14 · CVE-2020-9236

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei product (affected versions not specified) FusionCompute version 8.0.0.SPC1 and earlier

Description There is an improper interface design vulnerability in a Huawei product. A module interface of the affected product does not handle some operations properly, allowing attackers to perform malicious operations and compromise the module service.

Recommendations For FusionCompute version 8.0.0.SPC1 and earlier, update to a patched version to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected Huawei products.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2020-9236

Affected Products

Fusioncompute

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-9236 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-fc-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9236 · Vendor Advisory
• https://twitter.com/CVEnew/status/1872586809714311272 · Twitter Post
• https://twitter.com/MidExploit/status/1872625307469107578 · Twitter Post
• https://twitter.com/cracbot/status/1874334801895002191 · Twitter Post
• https://t.me/cvedetector/13727 · Telegram Post
• https://twitter.com/CveFindCom/status/1872583576253854094 · Twitter Post