CVE-2020-9072

Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-osd-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-osd-enVendor Advisory

Published

Apr 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9066Huawei smartphones OxfordP-AN10B with versions earlier than …7.8
• CVE-2020-9067There is a buffer overflow vulnerability in some Huawei prod…8
• CVE-2020-9068Huawei AR3200 products with versions of V200R007C00SPC900, V…9.8
• CVE-2020-9069There is an information leakage vulnerability in some Huawei…6.5
• CVE-2020-9070Huawei smartphones Taurus-AL00B with versions earlier than 1…5.5
• CVE-2020-9071There is a few bytes out-of-bounds read vulnerability in som…6.5
• CVE-2020-9073Huawei P20 smartphones with versions earlier than 10.0.0.156…2.4
• CVE-2020-9074Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have …5.3
• CVE-2020-9075Huawei products Secospace USG6300;USG6300E with versions of …6.5
• CVE-2020-9076HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versio…6.8
• CVE-2020-9077HUAWEI P30 smart phones with versions earlier than 10.1.0.16…3.3
• CVE-2020-9078FusionCompute 8.0.0 have local privilege escalation vulnerab…7.8