Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-1865

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

Published

2021-01-13T23:15:13.323

Last Modified

2024-11-21T05:11:30.543

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

6.5

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei cloudengine_12800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_12800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r005c10spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r019c00spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r019c10spc800 Yes
Hardware huawei cloudengine_12800 - No
Operating System huawei cloudengine_5800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_5800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r005c10spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r019c00spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r019c10spc800 Yes
Hardware huawei cloudengine_5800 - No
Operating System huawei cloudengine_6800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_6800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r005c10spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r005c20spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r019c00spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r019c10spc800 Yes
Hardware huawei cloudengine_6800 - No
Operating System huawei cloudengine_7800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_7800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r005c10spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r019c00spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r019c10spc800 Yes
Hardware huawei cloudengine_7800 - No
References