CVE-2020-1824: Medium severity huawei ips firmware vulnerability
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)
The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1824?
CVE-2020-1824 is classified as a medium severity vulnerability due to the potential for information leakage from out-of-bounds reads.
How do I fix CVE-2020-1824?
To fix CVE-2020-1824, it is recommended to update the affected Huawei product firmware to the latest version provided by Huawei.
Which Huawei products are affected by CVE-2020-1824?
CVE-2020-1824 affects multiple Huawei products, including certain versions of the IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, and Secospace USG series.
Is CVE-2020-1824 an exploitable vulnerability?
Yes, CVE-2020-1824 can be exploited by sending specially crafted data packets that lead to out-of-bounds read conditions.
What are the potential impacts of CVE-2020-1824?
The potential impacts of CVE-2020-1824 include unauthorized data access which may compromise sensitive information.