CVE-2020-9209: Huawei SMC2.0 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can compromise normal service of affected products.

Affected products

• Huawei SMC2.0 Firmware: version v600r006c00spc700 only; version v600r006c00spc800 only; version v600r006c10spc500 only; version v600r006c10spc600 only; version v600r006c10spc601 only; version v600r006c10spc602 only; …

Published 2021-01-13. Last modified 2026-06-17.