Read the docs
TI-2020-01755 Aliases CVE-2020-1817GHSA-prg8-f8c5-v3hj

Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation…

Priority LOW 34Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation.

Why it matters now

EPSS 0.00231 14th percentileScored 2026-11-07
Fix Fixed PCManager: 10.0.1.36

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—PCManagerbefore 10.0.1.3610.0.1.36Patch availableCNA
  • PCManager Vendor— Affected before 10.0.1.36 Fixed in 10.0.1.36 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:huawei:pcmanager:*:*:*:*:*:*:*:*before 10.0.1.36VulnerableHuawei
  • cpe:2.3:a:huawei:pcmanager:*:*:*:*:*:*:*:* Versions before 10.0.1.36 Vulnerable ·Huawei

Remediation

  • Fix · CNA PCManager Fixed in 10.0.1.36

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1817
  2. 2026-10-03 Alias added: GHSA-prg8-f8c5-v3hj

References

Advisory 1

  • TI-2021-17258 PCManager versions 11.1.1.95 has a privilege escalation vulnerability. CVSS 3.1CRITICAL 9.8
  • TI-2019-03675 There is a code execution vulnerability in Huawei PCManager versions earlier than… CVSS 3.0HIGH 7.8
  • TI-2019-03674 There is a privilege escalation vulnerability in Huawei PCManager versions earlier than… CVSS 3.0HIGH 7.8
  • TI-2019-03658 Improper authentication in Huawei PC Manager CVSS 3.0HIGH 7.8
  • TI-2020-01782 PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability… CVSS 3.1HIGH 7.8
  • TI-2021-15197 Path traversal in PC Smart Full Scene 11.1 CVSS 3.1MEDIUM 6.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences