ID de Prueba:	1.3.6.1.4.1.25623.1.0.145191
Categoría:	Huawei
Título:	Huawei Data Communication: Command Injection Vulnerability in Some Huawei Products (huawei-sa-20201111-02-injection)
Resumen:	Some Huawei products have a command injection vulnerability.
Descripción:	Summary: Some Huawei products have a command injection vulnerability. Vulnerability Insight: Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection. Vulnerability Impact: An attacker may exploit the vulnerability to cause command injection. Affected Software/OS: NIP6300 versions V500R001C30 V500R001C60 NIP6600 versions V500R001C30 V500R001C60 Secospace USG6300 versions V500R001C30 V500R001C60 Secospace USG6500 versions V500R001C30 V500R001C60 Secospace USG6600 versions V500R001C30 V500R001C60 USG9500 versions V500R001C30 V500R001C60 Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-9127 https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-injection-en
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.