CVE-2020-1824

State: Published
Severity: 3.7 Low
Published: Dec 28, 2024
Updated: Dec 28, 2024
Reserved: Nov 29, 2019

Description

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L	huawei

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
IPS ModuleHuawei	V500R001C30Affected V500R001C60Affected V500R005C00Affected
NGFW ModuleHuawei	V500R002C00Affected V500R002C20Affected V500R005C00Affected
NIP6300Huawei	V500R001C30Affected V500R001C60Affected V500R005C00Affected
NIP6600Huawei	V500R001C30Affected V500R001C60Affected V500R005C00Affected
NIP6800Huawei	V500R001C60Affected V500R005C00Affected
Secospace USG6300Huawei	V500R001C30Affected V500R001C60Affected V500R005C00Affected
Secospace USG6500Huawei	V500R001C30Affected V500R001C60Affected V500R005C00Affected
Secospace USG6600Huawei	V500R001C30Affected V500R005C00Affected
USG6000VHuawei	V500R003C00Affected

References

https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.