Privilege Escalation in Huawei PCManager Software
CVE-2020-1817

7.8HIGH

Key Information:

Vendor
Huawei
Status
Pcmanager
Vendor
CVE Published:
30 April 2020

Summary

Huawei PCManager, prior to version 10.0.1.36, contains a vulnerability that allows local attackers with low-level permissions to exploit improper management of file permissions. This flaw can be leveraged to inject commands, potentially leading to escalated privileges and unauthorized access to system resources.

Affected Version(s)

PCManager Versions earlier than 10.0.1.36

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.