Medium severity · published Jul 6, 2020
CVE-2020-1837
ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C8
Changxiang 8 Plus Firmware · Huawei
before 9.1.0.136\(c00e121r1p6t8\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1837
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1837
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-dos-en
More from Changxiang 8 Plus Firmware
4.6
CVE-2019-5264
There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor…