Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9124

There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.

Published

2020-12-29T18:15:13.230

Last Modified

2024-11-21T05:40:05.920

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-401
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei cloudengine_12800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_12800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_12800_firmware v200r005c10spc800 Yes
Hardware huawei cloudengine_12800 - No
Operating System huawei cloudengine_5800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_5800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_5800_firmware v200r005c10spc800 Yes
Hardware huawei cloudengine_5800 - No
Operating System huawei cloudengine_6800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_6800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_6800_firmware v200r005c10spc800 Yes
Hardware huawei cloudengine_6800 - No
Operating System huawei cloudengine_7800_firmware v200r002c50spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r003c00spc810 Yes
Operating System huawei cloudengine_7800_firmware v200r005c00spc800 Yes
Operating System huawei cloudengine_7800_firmware v200r005c10spc800 Yes
Hardware huawei cloudengine_7800 - No
References