Description
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Huawei IPS Module
Default version status: unaffected
V500R001C30affectedV500R001C60affectedV500R005C00affected
Huawei NGFW Module
Default version status: unaffected
V500R002C00affectedV500R002C20affectedV500R005C00affected
Huawei NIP6300
Default version status: unaffected
V500R001C30affectedV500R001C60affectedV500R005C00affected
Huawei NIP6600
Default version status: unaffected
V500R001C30affectedV500R001C60affectedV500R005C00affected
Huawei NIP6800
Default version status: unaffected
V500R001C60affectedV500R005C00affected
Huawei Secospace USG6300
Default version status: unaffected
V500R001C30affectedV500R001C60affectedV500R005C00affected
Huawei Secospace USG6500
Default version status: unaffected
V500R001C30affectedV500R001C60affectedV500R005C00affected
Huawei Secospace USG6600
Default version status: unaffected
V500R001C30affectedV500R005C00affected
Huawei USG6000V
Default version status: unaffected
V500R003C00affected