CVE-2020-9098

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-763

Affected software

VendorProductVersions
n/aOceanStor 5310 V5V500R007C60SPC100

References

Timeline

Published
Apr 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-90999.8Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with veCVE-2020-91007.8Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite imprCVE-2020-91016.5There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameterCVE-2020-91023.3There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerabilityCVE-2020-91034.6HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a special scenario, the system does not properlyCVE-2020-91044.3HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier thaCVE-2020-91056.7Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation CVE-2020-91064.6HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate CVE-2020-91075.5HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attackerCVE-2020-91085.5HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attackerCVE-2020-91094.6There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart weaCVE-2020-91104.6Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently va