6.7
CVE-2020-9105
- EPSS 0.03%
- Veröffentlicht 09.10.2020 13:15:11
- Zuletzt bearbeitet 21.11.2024 05:40:02
- Quelle psirt@huawei.com
- CVE-Watchlists
- Unerledigt
LoginTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploit may cause the service abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Taurus-an00b Firmware Version < 10.1.0.156\(c00e155r7p2\)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.042 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.