ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-9222

There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. (Vulnerability ID: HWPSIRT-2020-05241) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9222.
7.0
CVSS
6.4
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityHigh
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusUnavailable

Change Log
DateSourceChangesScore
2026-07-21PoCE: U→P4.4 → 6.4
2026-07-21cve.orginitial, patch: Unavailable4.4
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
HuaweiFusionCompute6.3.0
huaweifusioncompute6.3.0
huaweifusioncompute6.3.1
HuaweiFusionCompute6.3.1
huaweifusioncompute6.5.0
HuaweiFusionCompute6.5.0
HuaweiFusionCompute6.5.1
huaweifusioncompute6.5.1
HuaweiFusionCompute8.0.0
huaweifusioncompute8.0.0
Published: 2024-12-27