Huawei Taurus-AL00A Firmware vulnerabilities

6 CVEs affecting Huawei Taurus-AL00A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22304, published 2021-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22293, published 2021-02-06. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include:…
CVE-2021-22303, published 2021-02-06. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by…
CVE-2020-9093, published 2020-12-29. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a function refer to memory after it has been…
CVE-2021-22302, published 2021-02-06. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through…
CVE-2021-22304, published 2021-02-06. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this…
CVE-2020-9087, published 2020-10-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due…