CVE-2020-1820: Medium severity huawei ips firmware vulnerability
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)
The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1820?
CVE-2020-1820 is classified as a high-severity vulnerability due to the potential for remote attackers to exploit it.
How do I fix CVE-2020-1820?
To fix CVE-2020-1820, upgrade the affected Huawei product firmware to the latest version provided by Huawei.
What products are affected by CVE-2020-1820?
CVE-2020-1820 affects specific versions of Huawei IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, and Secospace firmware.
What kind of vulnerabilities does CVE-2020-1820 present?
CVE-2020-1820 presents multiple out-of-bounds read vulnerabilities in the COPS protocol implementation.
Can CVE-2020-1820 be exploited remotely?
Yes, CVE-2020-1820 can be exploited remotely, allowing attackers to read sensitive data.