CVE-2020-1799: Use After Free
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1799?
CVE-2020-1799 is a use after free vulnerability in Huawei E6878-370 Firmware versions 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), and 10.0.3.1(H563SP1C233).
How does CVE-2020-1799 affect Huawei E6878-370 Firmware?
CVE-2020-1799 allows an attacker to reference memory after it has been freed in certain scenarios through a web portal.
What is the severity of CVE-2020-1799?
CVE-2020-1799 has a severity rating of 7.5 (High).
How can the use after free vulnerability in CVE-2020-1799 be exploited?
An attacker can exploit the use after free vulnerability in CVE-2020-1799 by performing a series of crafted operations through a web portal.
Is there a fix for CVE-2020-1799?
Yes, a fix for CVE-2020-1799 is available. Please refer to the Huawei Security Advisory for more information: [https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en](https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en)