Medium severity · published Dec 28, 2024
CVE-2020-1820
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)
The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
IPS Module · Huawei
V500R001C30; V500R001C60; V500R005C00 · source: vendor
NM
NGFW Module · Huawei
V500R002C00; V500R002C20; V500R005C00 · source: vendor
NI
NIP6300 · Huawei
V500R001C30; V500R001C60; V500R005C00 · source: vendor
NI
NIP6600 · Huawei
V500R001C30; V500R001C60; V500R005C00 · source: vendor
NI
NIP6800 · Huawei
V500R001C60; V500R005C00 · source: vendor
SU
Secospace USG6300 · Huawei
V500R001C30; V500R001C60; V500R005C00 · source: vendor
SU
Secospace USG6500 · Huawei
V500R001C30; V500R001C60; V500R005C00 · source: vendor
SU
Secospace USG6600 · Huawei
V500R001C30; V500R005C00 · source: vendor
US
USG6000V · Huawei
V500R003C00 · source: vendor
IM
Ips Module Firmware · Huawei
v500r001c30; v500r001c60; v500r005c00 · source: NVD
NM
Ngfw Module Firmware · Huawei
v500r002c00; v500r002c20; v500r005c00 · source: NVD
NF
Nip6300 Firmware · Huawei
v500r001c30; v500r001c60; v500r005c00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1820
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en
More from IPS Module
7.5
CVE-2018-7994
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50;…
5.3
CVE-2020-1824
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products
5.3
CVE-2020-1823
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products
5.3
CVE-2020-1822
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products
5.3
CVE-2020-1821
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products