CVE-2020-1870

CVE-2020-1870: vulnerability in Huawei CloudEngine 12800

Published · Updated

Follow this CVE+ Monitor CloudEngine+ Monitor NE40E

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Affected products
Huawei · CloudEngine 12800Huawei · CloudEngine 5800Huawei · CloudEngine 6800Huawei · CloudEngine 7800Huawei · NE40EHuawei · NE40E-FHuawei · NE40E-M
Related CVEs — Huawei CloudEngine 12800

In the same product, most dangerous first.

CVE-2020-9124—CVE-2020-9124EPSS 0.9%CVE-2020-9094—CVE-2020-9094EPSS 0.7%CVE-2020-9207—CVE-2020-9207EPSS 0.6%CVE-2020-9102—CVE-2020-9102EPSS 0.2%