Vulnerability · Published Apr 30, 2020 · Assigned by huawei

CVE-2020-9098

High 7.5

In plain English

A high-severity security flaw in OceanStor 5310 V5. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.8%top 43.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.

Affected products (as reported)

VendorProductVersions
n/a OceanStor 5310 V5 V500R007C60SPC100

References