CVE-2020-9105

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.7MEDIUM
EPSS
0.0%
top 92.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Taurus-an00b Firmware
Timeline
PublishedOct 9
Latest updateMay 24

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploit may cause the service abnormal.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/taurus-an00b_firmware< 10.1.0.156\(c00e155r7p2\)
▶CVEListV5taurus-an00bVersions earlier than 10.1.0.156(C00E155R7P2)

🔴Vulnerability Details

2
GHSA
GHSA-vvgf-f82h-v9cv: Taurus-AN00B versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9105: Taurus-AN00B versions earlier than 10↗2020-10-09
▶

💬Community

1
Bugzilla
CVE-2017-9105 adns: pointer corruption when a nameserver speaks first because of a wrong number of pointer dereferences↗2020-06-22
▶
CVE-2020-9105 (MEDIUM CVSS 6.7) | Taurus-AN00B versions earlier than | cvebase.io