CVEvulnerability

CVE-2020-1820

5.3 MEDIUM Published 2024-12-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-125

Description

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

Affected configurations

• huawei ips module firmware v500r001c30 • huawei ips module firmware v500r001c60 • huawei ips module firmware v500r005c00 • huawei ngfw module firmware v500r002c00 • huawei ngfw module firmware v500r002c20 • huawei ngfw module firmware v500r005c00 • huawei nip6300 firmware v500r001c30 • huawei nip6300 firmware v500r001c60 • huawei nip6300 firmware v500r005c00 • huawei nip6600 firmware v500r001c30 • huawei nip6600 firmware v500r001c60 • huawei nip6600 firmware v500r005c00 • huawei nip6800 firmware v500r001c60 • huawei nip6800 firmware v500r005c00 • huawei secospace usg6300 firmware v500r001c30 • huawei secospace usg6300 firmware v500r001c60 • huawei secospace usg6300 firmware v500r005c00 • huawei secospace usg6500 firmware v500r001c30 • huawei secospace usg6500 firmware v500r001c60 • huawei secospace usg6500 firmware v500r005c00 • huawei secospace usg6600 firmware v500r001c30 • huawei secospace usg6600 firmware v500r005c00 • huawei usg6000v firmware v500r003c00

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References