CVE-2020-1811

2020-02-1723:28:49

huawei

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

46.2%

JSON

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

CNA Affected

[
  {
    "product": "GaussDB 200",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "6.5.1"
      }
    ]
  }
]