Vulnerability · Published Feb 17, 2020 · Assigned by huawei

CVE-2020-1841

High 7.5

In plain English

A high-severity security flaw in CloudLink Board from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)1.0%top 37.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.

Affected products (as reported)

Vendor	Product	Versions
Huawei	CloudLink Board	20.0.0
Huawei	DP300	V500R002C00
Huawei	RSE6500	V100R001C00V500R002C00V500R002C00SPC900
Huawei	TE60	V500R002C00V600R006C00V600R006C00SPC200V600R006C00SPC300V600R006C10V600R019C00V600R019C00SPC100

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200207-01-te-en x_refsource_CONFIRM