CVE-2020-9230 — Insufficient Verification of Data Authenticity in Huawei Ws5800-10 Firmware

CWE-345 — Insufficient Verification of Data Authenticity3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.0%
top 95.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Ws5800-10 Firmware
Timeline
PublishedOct 12
Latest updateMay 24

Description

WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become abnormal.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5huawei/ws5800-10_firmware10.0.3.25

🔴Vulnerability Details

2
GHSA
GHSA-q4p6-cxv4-r642: WS5800-10 version 10↗2022-05-24
▶
CVEList
CVE-2020-9230: WS5800-10 version 10↗2020-10-12
▶
CVE-2020-9230 — Huawei Ws5800-10 Firmware vulnerability | cvebase