CVE-2020-9127

CVE-2020-9127 describes a command injection vulnerability in several Huawei NIP and Secospace USG series products, specifically versions V500R001C30 and V500R001C60. This flaw stems from insufficient input validation, allowing a highly privileged attacker to inject malicious code into product files. The vulnerability carries a CVSSv3 score of 6.7 (Medium), indicating that a successful exploit could lead to high impact on confidentiality, integrity, and availability, though it requires local access and high privileges. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.