CVE-2020-1824lowCWE-125

CVE-2020-1824: low-severity vulnerability in Huawei IPS Module

Published

Follow this CVE+ Monitor Secospace USG6600+ Monitor NIP6800

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.7epss 0.3%
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Huawei · IPS ModuleHuawei · NGFW ModuleHuawei · NIP6300Huawei · NIP6600Huawei · NIP6800Huawei · Secospace USG6300Huawei · Secospace USG6500Huawei · Secospace USG6600Huawei · USG6000V
Related CVEs — Huawei IPS Module

In the same product, most dangerous first.

CVE-2019-19415—CVE-2019-19415EPSS 0.9%CVE-2019-19416—CVE-2019-19416EPSS 0.9%CVE-2019-19417—CVE-2019-19417EPSS 0.9%CVE-2020-9101—CVE-2020-9101EPSS 0.3%CVE-2020-1823LOWCVE-2020-1823EPSS 0.3%CVE-2020-1822LOWCVE-2020-1822EPSS 0.3%