CVE Feed

    Dashboard / CVE / CVE-2020-1864

    CVE-2020-1864

    Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

    Published:Mar 20, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 20, 2020
    EPSS Score:0.00378
    CVSS Score:8.1

    Affected Products

    Vendor
    Huawei
    Product
    Secospace Antiddos8000
    Vendor
    Huawei
    Product
    Secospace Antiddos8000 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2019-5304 (CVSS 7.5) — Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specifi…
    CVE-2019-5254 (CVSS 8.6) — Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C…
    CVE-2019-5255 (CVSS 5.5) — Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C…
    CVE-2019-5256 (CVSS 5.5) — Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C…
    CVE-2019-5258 (CVSS 5.5) — Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C…
    CVE-2019-5257 (CVSS 5.5) — Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C…
    CVE-2017-17164 (CVSS 5.3) — Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be releas…
    CVE-2016-5435 (CVSS 5.9) — Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9…
    CVE-2016-4576 (CVSS 9.8) — Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NG…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High