CVE-2020-1870
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - psirt@huawei.com
- Published
- 2020-05-29
- Last modified
- 2024-08-04
- Weaknesses
- CWE-772
Affected products
- Cloudengine 12800 (Huawei)
- Cloudengine 12800 Firmware (Huawei)
- Cloudengine 5800 (Huawei)
- Cloudengine 6800 (Huawei)
- Cloudengine 6800 Firmware (Huawei)
- Cloudengine 7800 (Huawei)
- Ne40e (Huawei)
- Ne40e-f (Huawei)
- Ne40e-m (Huawei)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en
