Huawei Taurus-al00a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Taurus-al00a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-22293 — CVSS 7.5 (high): Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause…
• CVE-2021-22302 — CVSS 7.1 (high): There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can…
• CVE-2020-9087 — CVSS 5.5 (medium): Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may…
• CVE-2020-9093 — CVSS 5.5 (medium): There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message…
• CVE-2021-22303 — CVSS 3.3 (low): There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function…
• CVE-2021-22304 — CVSS 3.3 (low): There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed…