Huawei WS5800-10 Firmware vulnerabilities

3 CVEs affecting Huawei WS5800-10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9230, published 2020-10-12.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-9122, published 2020-10-12. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions…
• CVE-2020-9069, published 2020-05-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak…
• CVE-2020-9230, published 2020-10-12. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability to cause specific function to become…