What is CVE-2020-1799?

CVE-2020-1799 is a use after free vulnerability in Huawei E6878-370 Firmware versions 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), and 10.0.3.1(H563SP1C233).

How does CVE-2020-1799 affect Huawei E6878-370 Firmware?

CVE-2020-1799 allows an attacker to reference memory after it has been freed in certain scenarios through a web portal.

What is the severity of CVE-2020-1799?

CVE-2020-1799 has a severity rating of 7.5 (High).

How can the use after free vulnerability in CVE-2020-1799 be exploited?

An attacker can exploit the use after free vulnerability in CVE-2020-1799 by performing a series of crafted operations through a web portal.

Is there a fix for CVE-2020-1799?

Yes, a fix for CVE-2020-1799 is available. Please refer to the Huawei Security Advisory for more information: [https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en](https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en)

Vulnerability/
CVE-2020-1799

high

7.5

CWE

416

21/5/2020

CVE-2020-1799: Use After Free

First published: Thu May 21 2020(Updated: )

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei E6878-370 Firmware	=10.0.3.1\(h557sp27c233\)
Huawei E6878-370 Firmware	=10.0.3.1\(h563sp1c00\)
Huawei E6878-370 Firmware	=10.0.3.1\(h563sp1c233\)
Huawei E6878-370

Never miss a vulnerability like this again

Reference Links

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en

Frequently Asked Questions

What is CVE-2020-1799?
CVE-2020-1799 is a use after free vulnerability in Huawei E6878-370 Firmware versions 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), and 10.0.3.1(H563SP1C233).
How does CVE-2020-1799 affect Huawei E6878-370 Firmware?
CVE-2020-1799 allows an attacker to reference memory after it has been freed in certain scenarios through a web portal.
What is the severity of CVE-2020-1799?
CVE-2020-1799 has a severity rating of 7.5 (High).
How can the use after free vulnerability in CVE-2020-1799 be exploited?
An attacker can exploit the use after free vulnerability in CVE-2020-1799 by performing a series of crafted operations through a web portal.
Is there a fix for CVE-2020-1799?
Yes, a fix for CVE-2020-1799 is available. Please refer to the Huawei Security Advisory for more information: [https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en](https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en)

collector/nvd-index
vendor/huawei
canonical/huawei e6878-370 firmware
version/huawei e6878-370 firmware/10.0.3.1\(h557sp27c233\)
version/huawei e6878-370 firmware/10.0.3.1\(h563sp1c00\)
version/huawei e6878-370 firmware/10.0.3.1\(h563sp1c233\)
canonical/huawei e6878-370

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.