7.5

CVE-2020-9124

There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c50spc800
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r003c00spc810
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r005c00spc800
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r005c10spc800
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 5800 Firmware Versionv200r002c50spc800
   Huawei ≫ Cloudengine 5800 Version-
Huawei ≫ Cloudengine 5800 Firmware Versionv200r003c00spc810
   Huawei ≫ Cloudengine 5800 Version-
Huawei ≫ Cloudengine 5800 Firmware Versionv200r005c00spc800
   Huawei ≫ Cloudengine 5800 Version-
Huawei ≫ Cloudengine 5800 Firmware Versionv200r005c10spc800
   Huawei ≫ Cloudengine 5800 Version-
Huawei ≫ Cloudengine 6800 Firmware Versionv200r002c50spc800
   Huawei ≫ Cloudengine 6800 Version-
Huawei ≫ Cloudengine 6800 Firmware Versionv200r003c00spc810
   Huawei ≫ Cloudengine 6800 Version-
Huawei ≫ Cloudengine 6800 Firmware Versionv200r005c00spc800
   Huawei ≫ Cloudengine 6800 Version-
Huawei ≫ Cloudengine 6800 Firmware Versionv200r005c10spc800
   Huawei ≫ Cloudengine 6800 Version-
Huawei ≫ Cloudengine 7800 Firmware Versionv200r002c50spc800
   Huawei ≫ Cloudengine 7800 Version-
Huawei ≫ Cloudengine 7800 Firmware Versionv200r003c00spc810
   Huawei ≫ Cloudengine 7800 Version-
Huawei ≫ Cloudengine 7800 Firmware Versionv200r005c00spc800
   Huawei ≫ Cloudengine 7800 Version-
Huawei ≫ Cloudengine 7800 Firmware Versionv200r005c10spc800
   Huawei ≫ Cloudengine 7800 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.31% 0.514
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.