CVE-2020-36602
Summary
| CVE | CVE-2020-36602 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-20 20:15:00 UTC |
| Updated | 2022-09-22 13:29:00 UTC |
| Description | There is an out-of-bounds read and write vulnerability in some headset products. An unauthenticated attacker gets the device physically and crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause out-of-bounds read and write. |
Risk And Classification
Problem Types: CWE-125 | CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Huawei | 576up005 Hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 576up005 Hota-cm-h-shark-bd Firmware | 1.0.0.576 | All | All | All |
| Hardware | Huawei | 577hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 577hota-cm-h-shark-bd Firmware | 1.0.0.577 | All | All | All |
| Hardware | Huawei | 581up-hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 581up-hota-cm-h-shark-bd Firmware | 1.0.0.581 | All | All | All |
| Hardware | Huawei | 586-hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 586-hota-cm-h-shark-bd Firmware | 1.0.0.586 | All | All | All |
| Hardware | Huawei | 588-hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 588-hota-cm-h-shark-bd Firmware | 1.0.0.588 | All | All | All |
| Hardware | Huawei | 606-hota-cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | 606-hota-cm-h-shark-bd Firmware | 1.0.0.606 | All | All | All |
| Hardware | Huawei | Bi-acc-report | - | All | All | All |
| Operating System | Huawei | Bi-acc-report Firmware | 1.0.0.1 | All | All | All |
| Operating System | Huawei | Bi-acc-report Firmware | 1.0.0.2 | All | All | All |
| Operating System | Huawei | Bi-acc-report Firmware | 1.0.0.3 | All | All | All |
| Operating System | Huawei | Bi-acc-report Firmware | 1.0.0.4 | All | All | All |
| Operating System | Huawei | Bi-acc-report Firmware | 1.0.0.5 | All | All | All |
| Hardware | Huawei | Cm-h-shark-bd | - | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.106 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.116 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.202 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.208 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.216 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.226 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.228 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.510 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.520 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.522 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.566 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.576 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.578 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.586 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.588 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp11\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp15\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp17\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp21\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp27\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp29\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp31\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.0.0.66\(vn2-sp33\) | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.208 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.216 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.226 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.228 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.510 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.520 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.522 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.566 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.578 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.586 | All | All | All |
| Operating System | Huawei | Cm-h-shark-bd Firmware | 1.9.0.588 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| huawei-sa-20220826-01-outofboundread-en | MISC | www.huawei.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.