CVE-2020-1837: Medium severity huawei changxiang 8 plus firmware vulnerability

Q: What is the vulnerability ID for ChangXiang 8 Plus?

The vulnerability ID for ChangXiang 8 Plus is CVE-2020-1837.

Q: What is the affected software version for ChangXiang 8 Plus?

ChangXiang 8 Plus versions earlier than 9.1.0.136(C00E121R1P6T8) are affected.

Q: What is the severity rating of CVE-2020-1837?

The severity rating of CVE-2020-1837 is medium with a severity value of 5.3.

Q: How can an attacker exploit CVE-2020-1837?

An attacker can exploit CVE-2020-1837 by crafting a fake base station and sending certain messages to the vulnerable device.

Q: How can I fix CVE-2020-1837?

To fix CVE-2020-1837, update to version 9.1.0.136(C00E121R1P6T8) or later of the ChangXiang 8 Plus firmware.

Published Jul 6, 2020

Updated

ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.

Affected Software

2 affected components

Huawei Changxiang 8 Plus Firmware<9.1.0.136\(c00e121r1p6t8\)

Huawei Changxiang 8 Plus

Event History

Jul 6, 2020

CVE Published

via MITRE·05:27 PM

Data Sourced

via MITRE·05:27 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for ChangXiang 8 Plus?

The vulnerability ID for ChangXiang 8 Plus is CVE-2020-1837.

What is the affected software version for ChangXiang 8 Plus?

ChangXiang 8 Plus versions earlier than 9.1.0.136(C00E121R1P6T8) are affected.

What is the severity rating of CVE-2020-1837?

The severity rating of CVE-2020-1837 is medium with a severity value of 5.3.

How can an attacker exploit CVE-2020-1837?

An attacker can exploit CVE-2020-1837 by crafting a fake base station and sending certain messages to the vulnerable device.

How can I fix CVE-2020-1837?