Lucene search

HuaweiCVE-2020-9098

HistoryApr 30, 2020 - 10:15 p.m.

CVE-2020-9098

2020-04-3022:15:12

CWE-763

huawei

web.nvd.nist.gov

huawei

oceanstor 5310

v500r007c60spc100

invalid pointer access

vulnerability

nvd

cve-2020-9098

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

45.6%

JSON

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.

Affected configurations

Nvd

Vulners

Node

huaweioceanstor_5310Matchv5

AND

huaweioceanstor_5310_firmwareMatchv500r007c60spc100

VendorProductVersionCPE
huaweioceanstor_5310v5cpe:2.3:h:huawei:oceanstor_5310:v5:*:*:*:*:*:*:*
huaweioceanstor_5310_firmwarev500r007c60spc100cpe:2.3:o:huawei:oceanstor_5310_firmware:v500r007c60spc100:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	oceanstor_5310	v5	cpe:2.3:h:huawei:oceanstor_5310:v5:::::::*
huawei	oceanstor_5310_firmware	v500r007c60spc100	cpe:2.3:o:huawei:oceanstor_5310_firmware:v500r007c60spc100:::::::*

CNA Affected

[
  {
    "product": "OceanStor 5310 V5",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V500R007C60SPC100"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

45.6%

JSON

Related for CVE-2020-9098