CVE-2020-1824lowCWE-125

CVE-2020-1824: falha de baixa gravidade em Huawei IPS Module

Publicada em

Seguir esta CVE+ Monitorar Secospace USG6600+ Monitorar NIP6800

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.7epss 0.3%
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Huawei · IPS ModuleHuawei · NGFW ModuleHuawei · NIP6300Huawei · NIP6600Huawei · NIP6800Huawei · Secospace USG6300Huawei · Secospace USG6500Huawei · Secospace USG6600Huawei · USG6000V
CVEs relacionadas — Huawei IPS Module

No mesmo produto, das mais perigosas para as menos.

CVE-2019-19415—CVE-2019-19415EPSS 0.9%CVE-2019-19416—CVE-2019-19416EPSS 0.9%CVE-2019-19417—CVE-2019-19417EPSS 0.9%CVE-2020-9101—CVE-2020-9101EPSS 0.3%CVE-2020-1823LOWCVE-2020-1823EPSS 0.3%CVE-2020-1822LOWCVE-2020-1822EPSS 0.3%