CVE-2020-1870: High severity huawei cloudengine 12800 vulnerability
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1870?
CVE-2020-1870 is a denial of service vulnerability in some Huawei products due to improper memory management.
How does CVE-2020-1870 work?
Attackers can exploit CVE-2020-1870 by performing a series of operations that cause memory leakage and may result in a denial of service.
Which Huawei products are affected by CVE-2020-1870?
Huawei Cloudengine 12800 Firmware versions v200r019c00, v200r019c00spc600, v200r019c00spc800, and v200r019c10 are affected by CVE-2020-1870.
What is the severity of CVE-2020-1870?
CVE-2020-1870 has a severity score of 7.5 (high).
Is there a fix available for CVE-2020-1870?
Huawei has released a security advisory with mitigation measures for CVE-2020-1870. Please refer to the official Huawei advisory for details.