Huawei Taurus-An00b Firmware
7 CVEs affecting Huawei Taurus-An00b Firmware. Latest disclosed: 2020-10-19. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9112 | High | 7.8 | 2020-10-19 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the busin… |
CVE-2020-9105 | Medium | 6.7 | 2020-10-09 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect… |
CVE-2020-9238 | Medium | 6.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. At… |
CVE-2020-9084 | Medium | 6.5 | 2020-09-18 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific ope… |
CVE-2020-9240 | Medium | 5.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. At… |
CVE-2020-9091 | Medium | 5.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently… |
CVE-2020-9110 | Medium | 4.6 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output o… |