CVE-2020-9238

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 83.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei Taurus-an00b Firmware
Timeline
PublishedOct 12
Latest updateMay 24

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5taurus-an00bVersions earlier than 10.1.0.156(C00E155R7P2)

🔴Vulnerability Details

2
GHSA
GHSA-x398-2224-qpj6: Taurus-AN00B versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9238: Taurus-AN00B versions earlier than 10↗2020-10-12
▶
CVE-2020-9238 (MEDIUM CVSS 6.5) | Taurus-AN00B versions earlier than | cvebase.io