Vulnerability · Published Oct 12, 2020 · Assigned by huawei
CVE-2020-9087
Medium 5.5
In plain English
A medium-severity security flaw in Taurus-AL00A. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 89.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Taurus-AL00A | 10.0.0.1(C00E1R1P1) |