Huawei Taurus-AN00B Firmware vulnerabilities

7 CVEs affecting Huawei Taurus-AN00B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9112, published 2020-10-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9238, published 2020-10-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability…
CVE-2020-9105, published 2020-10-09. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this…
CVE-2020-9110, published 2020-10-12. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output of device in certain specific scenario,…
CVE-2020-9084, published 2020-09-18. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability.…
CVE-2020-9091, published 2020-10-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently. Attackers can exploit this…
CVE-2020-9240, published 2020-10-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability…
CVE-2020-9112, published 2020-10-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the business functions of the device. An attacker…