CVE-2020-9200 - There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00

Back Back to CVE browser

HIGH

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00

Published Dec 24, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.31%

Description

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.

Affected products

Vendor n/a Product iManager NetEco 6000 Default
n/a
- Version
  V600R021C00
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

iManager NetEco 6000

n/a

Version	Status	Constraints
V600R021C00	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1236

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30029
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-csvinjection-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30029		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-csvinjection-en		x_refsource_MISCVendor Advisory