← Vulnerability feed

Vulnerability record · CVE-2020-9207 · published 29 December 2020

CVE-2020-9207: Huawei cloudengine 12800 firmware improper authentication vulnerability

Huawei · Cloudengine 12800 Firmware

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

7.8 CVSS 3.1 High EPSS 0.57% · top 54.2% CWE-287 · Improper authentication
7.8CVSS 3.1 base score, v2 6.8
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-en Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-en Vendor Advisory

Track CVE-2020-9207 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-17301Huawei ar120-s firmware improper certificate validation vulnerabilityHuawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C0…EPSS 0.97%9.8CVE-2016-6178Huawei ne5000e firmware improper input validation vulnerabilityHuawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with s…EPSS 3.0%7.8CVE-2021-39976Huawei cloudengine 5800 firmware vulnerabilityThere is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local at…EPSS 0.18%7.5CVE-2021-40008Huawei cloudengine 7800 firmware vulnerabilityThere is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 a…EPSS 0.68%7.5CVE-2021-22328Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker m…EPSS 0.68%7.5CVE-2021-22332Huawei cloudengine 12800 firmware double free vulnerabilityThere is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a f…EPSS 0.68%7.5CVE-2021-22393Huawei cloudengine 12800 firmware vulnerabilityThere is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affect…EPSS 0.68%7.5CVE-2020-9124Huawei cloudengine 12800 firmware memory leak vulnerabilityThere is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerabili…EPSS 0.93%

Source: NIST National Vulnerability Database (record CVE-2020-9207), CISA KEV, FIRST EPSS (scores of 2026-10-18). This page is refreshed as NVD updates the record.