CVE-2020-9207

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers can exploit this vulnerability by crafting malicious files to bypass current verification mechanism. This can compromise normal service.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-vrp-enVendor Advisory

Published

Dec 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9200There has a CSV injection vulnerability in iManager NetEco 6…7.8
• CVE-2020-9201There is an out-of-bounds read vulnerability in some version…6.5
• CVE-2020-9202There is an information disclosure vulnerability in TE Mobil…4.4
• CVE-2020-9203There is a resource management errors vulnerability in Huawe…3.3
• CVE-2020-9205There has a CSV injection vulnerability in ManageOne 8.0.1. …4.9
• CVE-2020-9206The eUDC660 product has a resource management vulnerability.…6.7
• CVE-2020-9208There is an information leak vulnerability in iManager NetEc…6.5
• CVE-2020-9209There is a privilege escalation vulnerability in SMC2.0 prod…6.7
• CVE-2020-9210There is an insufficient integrity vulnerability in Huawei p…6.8
• CVE-2020-9211There is an out-of-bound read and write vulnerability in Hua…7.2
• CVE-2020-9212There is a vulnerability in some version of USG9500 that the…6.5
• CVE-2020-9213There is a denial of service vulnerability in some huawei pr…7.5