What is the severity of CVE-2020-1864?

The severity of CVE-2020-1864 is rated as high (8.1).

Which Huawei products are affected by CVE-2020-1864?

Huawei Secospace Antiddos8000 Firmware versions v500r001c00, v500r001c20, v500r001c60, and v500r005c00 are affected by CVE-2020-1864.

How does the vulnerability in CVE-2020-1864 work?

Attackers can exploit the vulnerability by obtaining certain information and forging the peer device to send specific packets to the affected device, due to the improper implementation of the authentication function.

What is the Common Weakness Enumeration (CWE) ID associated with CVE-2020-1864?

The CWE ID associated with CVE-2020-1864 is CWE-287.

How can I fix CVE-2020-1864?

To fix CVE-2020-1864, it is recommended to apply the security patches provided by Huawei as mentioned in the reference link.

Vulnerability/
CVE-2020-1864

high

8.1

CWE

287

20/3/2020

4/8/2024

CVE-2020-1864

First published: Fri Mar 20 2020(Updated: )

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

Credit: psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei Secospace Antiddos8000 Firmware	=v500r001c00
Huawei Secospace Antiddos8000 Firmware	=v500r001c20
Huawei Secospace Antiddos8000 Firmware	=v500r001c60
Huawei Secospace Antiddos8000 Firmware	=v500r005c00
Huawei Secospace AntiDDoS8000

Never miss a vulnerability like this again

Reference Links

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en

Frequently Asked Questions

What is the severity of CVE-2020-1864?
The severity of CVE-2020-1864 is rated as high (8.1).
Which Huawei products are affected by CVE-2020-1864?
Huawei Secospace Antiddos8000 Firmware versions v500r001c00, v500r001c20, v500r001c60, and v500r005c00 are affected by CVE-2020-1864.
How does the vulnerability in CVE-2020-1864 work?
Attackers can exploit the vulnerability by obtaining certain information and forging the peer device to send specific packets to the affected device, due to the improper implementation of the authentication function.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2020-1864?
The CWE ID associated with CVE-2020-1864 is CWE-287.
How can I fix CVE-2020-1864?
To fix CVE-2020-1864, it is recommended to apply the security patches provided by Huawei as mentioned in the reference link.

collector/nvd-index
agent/references
agent/severity
agent/author
agent/weakness
agent/type
agent/tags
agent/event
agent/last-modified-date
agent/first-publish-date
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
vendor/huawei
canonical/huawei secospace antiddos8000 firmware
version/huawei secospace antiddos8000 firmware/v500r001c00
version/huawei secospace antiddos8000 firmware/v500r001c20
version/huawei secospace antiddos8000 firmware/v500r001c60
version/huawei secospace antiddos8000 firmware/v500r005c00
canonical/huawei secospace antiddos8000

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.