CVE-2020-9222CWE-269

There is a privilege escalation vulnerability in Huawei FusionCompute product

High · published December 27, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. (Vulnerability ID: HWPSIRT-2020-05241)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9222.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-12-27T09:50Z
EPSS history
Timeline
  • 27 DEC 09:50Z
    There is a privilege escalation vulnerability in Huawei FusionCompute product
    cvelistv5