Medium severity · published Jan 13, 2021
CVE-2020-1866
There is an out-of-bounds read vulnerability in several products
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Nip6800 Firmware · Huawei
v500r001c30; v500r001c60spc500; v500r005c00 · source: NVD
SF
S12700 Firmware · Huawei
v200r008c00 · source: NVD
SF
S2700 Firmware · Huawei
v200r008c00 · source: NVD
SF
S5700 Firmware · Huawei
v200r008c00 · source: NVD
SF
S6700 Firmware · Huawei
v200r008c00 · source: NVD
SF
S7700 Firmware · Huawei
v200r008c00 · source: NVD
SF
S9700 Firmware · Huawei
v200r008c00 · source: NVD
SU
Secospace Usg6600 Firmware · Huawei
v500r001c30spc200; v500r001c30spc600; v500r001c60spc500; v500r005c00 · source: NVD
UF
Usg9500 Firmware · Huawei
v500r001c30spc300; v500r001c30spc600; v500r001c60spc500; v500r005c00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1866
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1866
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en
More from Nip6800 Firmware
9.8
CVE-2020-9099
Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20;…
8.6
CVE-2019-5254
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace…
7.5
CVE-2021-22320
There is a denial of service vulnerability in Huawei products
7.5
CVE-2020-9213
There is a denial of service vulnerability in some huawei products
7.5
CVE-2019-19417
The SIP module of some Huawei products have a denial of service (DoS) vulnerability