CVE-2020-1865
Summary
| CVE | CVE-2020-1865 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-01-13 23:15:00 UTC |
| Updated | 2021-01-19 17:09:00 UTC |
| Description | There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 12800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 12800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 5800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 5800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 5800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 6800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r005c20spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 6800 Firmware | v200r019c10spc800 | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Hardware | Huawei | Cloudengine 7800 | - | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r002c50spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r003c00spc810 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r005c10spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c00spc800 | All | All | All |
| Operating System | Huawei | Cloudengine 7800 Firmware | v200r019c10spc800 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory - Out-of-Bounds Read Vulnerability in Huawei CloudEngine Products | MISC | www.huawei.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.