Huawei Oceanstor 5310 Firmware vulnerabilities

2 CVEs affecting Huawei Oceanstor 5310 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9098, published 2020-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1881, published 2020-02-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform…
CVE-2020-9098, published 2020-04-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the…