What is CVE-2020-9098?

CVE-2020-9098 is a high-severity vulnerability in Huawei Oceanstor_5310, classified under Release of Invalid Pointer or Reference. CVSS score: 7.5/10. Published 2020-04-30.

How severe is CVE-2020-9098?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Huawei Oceanstor_5310

CVE-2020-9098

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter…

EPSS: 0.008 (52.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Huawei Oceanstor_5310 — versions v5
Huawei Oceanstor_5310_firmware — versions v500r007c60spc100
N/a Oceanstor 5310 V5 — versions V500R007C60SPC100

Weakness classification (CWE)

CWE-763 — Release of Invalid Pointer or Reference

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-9098?: CVE-2020-9098 is a high-severity vulnerability in Huawei Oceanstor_5310, classified under Release of Invalid Pointer or Reference. CVSS score: 7.5/10. Published 2020-04-30.
How severe is CVE-2020-9098?: High severity. CVSS v3 base score is 7.5 out of 10.