Huawei Taurus-an00b Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Taurus-an00b Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2020-9112 — CVSS 7.8 (high): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions…
• CVE-2020-9105 — CVSS 6.7 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation…
• CVE-2020-9084 — CVSS 6.5 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may…
• CVE-2020-9238 — CVSS 6.5 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify…
• CVE-2020-9240 — CVSS 5.5 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify…
• CVE-2020-9091 — CVSS 5.5 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify…
• CVE-2020-9110 — CVSS 4.6 (medium): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently…