First published: Fri Mar 20 2020(Updated: )
Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Secospace Antiddos8000 Firmware | =v500r001c00 | |
Huawei Secospace Antiddos8000 Firmware | =v500r001c20 | |
Huawei Secospace Antiddos8000 Firmware | =v500r001c60 | |
Huawei Secospace Antiddos8000 Firmware | =v500r005c00 | |
Huawei Secospace AntiDDoS8000 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-1864 is rated as high (8.1).
Huawei Secospace Antiddos8000 Firmware versions v500r001c00, v500r001c20, v500r001c60, and v500r005c00 are affected by CVE-2020-1864.
Attackers can exploit the vulnerability by obtaining certain information and forging the peer device to send specific packets to the affected device, due to the improper implementation of the authentication function.
The CWE ID associated with CVE-2020-1864 is CWE-287.
To fix CVE-2020-1864, it is recommended to apply the security patches provided by Huawei as mentioned in the reference link.