CVE-2020-9112

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker could exploit this vulnerability to access the protecting information, resulting in the elevation of the privilege.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@huawei.com

Published

2020-10-19

Last modified

2024-08-04

Weaknesses

CWE-269

Affected products

• Taurus-an00b Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-01-privilege-en