VulnerabilityModified
CVE-2020-9098
Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability.
HIGH 7.5EPSS 0.79%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.79%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.79% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-763
- Affected
- huawei/oceanstor 5310 firmware
- Source
- psirt@huawei.com
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-enVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-enVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-enVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-enVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.