Vulnerability · Published May 29, 2020 · Assigned by huawei

CVE-2020-1870

High 7.5

In plain English

A high-severity security flaw in CloudEngine 12800 from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.7%top 45.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.

Affected products (as reported)

Vendor	Product	Versions
Huawei	CloudEngine 12800	V200R019C00SPC800
Huawei	CloudEngine 5800	V200R019C00SPC800
Huawei	CloudEngine 6800	V200R005C20SPC800V200R019C00SPC800
Huawei	CloudEngine 7800	V200R019C00SPC800
Huawei	NE40E	V800R011C00SPC200V800R011C00SPC300V800R011C10SPC100
Huawei	NE40E-F	V800R011C00SPC200V800R011C10SPC100
Huawei	NE40E-M	V800R011C00SPC200V800R011C10SPC100

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en x_refsource_CONFIRM