CVE-2020-9240

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-12 · updated 2026-06-17
Weakness: CWE-120

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.

Affected products

Taurus-AN00B: before 10.1.0.156 — fixed in 10.1.0.156

How to fix

Upgrade to a fixed version: Taurus-AN00B 10.1.0.156. Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-bufferoverflow-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-bufferoverflow-en

Get alerted when CVE-2020-9240 or the next vulnerability affects your stack