CVE-2020-9137

Name of the Vulnerable Software and Affected Versions CloudEngine 12800 (affected versions not specified) CloudEngine 5800 (affected versions not specified) CloudEngine 6800 (affected versions not specified) CloudEngine 7800 (affected versions not specified)

Description The issue is related to a privilege escalation vulnerability due to insufficient input validation. A local attacker with high privilege may execute specially crafted scripts in the affected products, leading to privilege escalation.

Recommendations For CloudEngine 12800, update to a version that addresses the insufficient input validation issue. For CloudEngine 5800, update to a version that addresses the insufficient input validation issue. For CloudEngine 6800, update to a version that addresses the insufficient input validation issue. For CloudEngine 7800, update to a version that addresses the insufficient input validation issue. As a temporary workaround, consider restricting the execution of specially crafted scripts in the affected products until a patch is available.