Medium severity6.8NVD Advisory· Published Sep 3, 2020· Updated Jun 17, 2026

CVE-2020-9199

Description

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/B2368llm-create
Range: V100R001C00
B2368-22/B2368-22description
Huawei/B2368 22 Firmware
cpe:2.3:o:huawei:b2368-22_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/B2368 57 Firmware
cpe:2.3:o:huawei:b2368-57_firmware:v100r001c00:*:*:*:*:*:*:*
Huawei/B2368 66 Firmware
cpe:2.3:o:huawei:b2368-66_firmware:v100r001c00:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-01-command-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000