Test Kennung:	1.3.6.1.4.1.25623.1.0.145191
Kategorie:	Huawei
Titel:	Huawei Data Communication: Command Injection Vulnerability in Some Huawei Products (huawei-sa-20201111-02-injection)
Zusammenfassung:	Some Huawei products have a command injection vulnerability.
Beschreibung:	Summary: Some Huawei products have a command injection vulnerability. Vulnerability Insight: Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection. Vulnerability Impact: An attacker may exploit the vulnerability to cause command injection. Affected Software/OS: NIP6300 versions V500R001C30 V500R001C60 NIP6600 versions V500R001C30 V500R001C60 Secospace USG6300 versions V500R001C30 V500R001C60 Secospace USG6500 versions V500R001C30 V500R001C60 Secospace USG6600 versions V500R001C30 V500R001C60 USG9500 versions V500R001C30 V500R001C60 Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-9127 https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-injection-en
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.