What is CVE-2020-9100?

CVE-2020-9100 is a high-severity vulnerability in Huawei Hisuite, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2020-07-06.

How severe is CVE-2020-9100?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Huawei Hisuite

CVE-2020-9100

Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing.

EPSS: 0.004 (27.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Huawei Hisuite
N/a Hisuite — versions Earlier than HiSuite 10.1.0.500

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9100?: CVE-2020-9100 is a high-severity vulnerability in Huawei Hisuite, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2020-07-06.
How severe is CVE-2020-9100?: High severity. CVSS v3 base score is 7.8 out of 10.