CVE-2020-9137: Huawei Cloudengine 12800 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.

Affected products

• Huawei Cloudengine 12800 Firmware: version v200r002c50spc800 only; version v200r003c00spc810 only; version v200r005c00spc800 only; version v200r005c10spc800 only; version v200r019c00spc800 only; version v200r019c10spc800 only
• Huawei Cloudengine 5800 Firmware: version v200r002c50spc800 only; version v200r003c00spc810 only; version v200r005c00spc800 only; version v200r005c10spc800 only; version v200r019c00spc800 only; version v200r019c10spc800 only
• Huawei Cloudengine 6800 Firmware: version v200r002c50spc800 only; version v200r003c00spc810 only; version v200r005c00spc800 only; version v200r005c10spc800 only; version v200r005c20spc800 only; version v200r019c00spc800 only; …
• Huawei Cloudengine 7800 Firmware: version v200r002c50spc800 only; version v200r003c00spc810 only; version v200r005c00spc800 only; version v200r005c10spc800 only; version v200r019c00spc800 only; version v200r019c10spc800 only

Published 2020-12-24. Last modified 2026-06-17.