CVEvulnerability
CVE-2020-9098
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-763
Description
Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.
Affected configurations
• huawei oceanstor 5310 firmware v500r007c60spc100
Related
Weakness · CWE (1)
- CWE-763 Release of Invalid Pointer or Reference weakness
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en Vendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en Vendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en Vendor Advisory