4.6
CVSSv2

CVE-2020-9072

Published: 27/04/2020 Updated: 21/07/2021
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the malicious user to obtain a higher privilege.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

huawei osd_firmware

Vendor Advisories

There is a local privilege escalation vulnerability in Huawei OSD product An authenticated, local attacker can constructs a specific file path to exploit this vulnerability Successful exploitation may cause the attacker to obtain a higher privilege (Vulnerability ID: HWPSIRT-2020-02153) This vulnerability has been assigned a Common Vulnerabiliti ...