CVE-2020-9098
Summary
| CVE | CVE-2020-9098 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-30 22:15:00 UTC |
| Updated | 2020-05-05 19:01:00 UTC |
| Description | Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot. |
Risk And Classification
Problem Types: CWE-763
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Oceanstor 5310 | v5 | All | All | All |
| Hardware | Huawei | Oceanstor 5310 | v5 | All | All | All |
| Operating System | Huawei | Oceanstor 5310 Firmware | v500r007c60spc100 | All | All | All |
| Operating System | Huawei | Oceanstor 5310 Firmware | v500r007c60spc100 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Invalid Pointer Access Vulnerability in Huawei OceanStor Product | CONFIRM | www.huawei.com | Vendor Advisory |
| Security Advisory - Invalid Pointer Access Vulnerability in Huawei OceanStor Product | CONFIRM | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.