What is CVE-2020-9098?

CVE-2020-9098 is a high-severity vulnerability in Huawei Oceanstor 5310, classified under Release of Invalid Pointer or Reference. CVSS score: 7.5/10. Published 2020-04-30.

How severe is CVE-2020-9098?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Huawei Oceanstor 5310

CVE-2020-9098

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.

Published 2020-04-30 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.008 (55.9th percentile), scored 2026-10-23.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 55.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Huawei Oceanstor 5310 — versions v5
Huawei Oceanstor 5310 Firmware — versions v500r007c60spc100
Oceanstor 5310 V5 — versions V500R007C60SPC100

Weakness classification (CWE)

CWE-763 — Release of Invalid Pointer or Reference

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointe… (Vendor Advisory)
www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointe… (Vendor Advisory)

Frequently asked questions

What is CVE-2020-9098?: CVE-2020-9098 is a high-severity vulnerability in Huawei Oceanstor 5310, classified under Release of Invalid Pointer or Reference. CVSS score: 7.5/10. Published 2020-04-30.
How severe is CVE-2020-9098?: High severity. CVSS v3 base score is 7.5 out of 10.