CVE-2020-1822

Published: Dec 28, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

Affected (23)

Products: Huawei: Ips Module Firmware, Ngfw Module Firmware, Nip6300 Firmware, Nip6600 Firmware, Nip6800 Firmware, Secospace Usg6300 Firmware, Secospace Usg6500 Firmware, Secospace Usg6600 Firmware, Usg6000v Firmware

9 products

Secospace Usg6300 Firmware

Secospace Usg6500 Firmware

Secospace Usg6600 Firmware

Usg6000v Firmware

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ips Module Firmware	Version v500r001c30
Huawei Ips Module Firmware	Version v500r001c60
Huawei Ips Module Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Ips Module	All versions

Configuration B

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ngfw Module Firmware	Version v500r002c00
Huawei Ngfw Module Firmware	Version v500r002c20
Huawei Ngfw Module Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Ngfw Module	All versions

Configuration C

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6300 Firmware	Version v500r001c30
Huawei Nip6300 Firmware	Version v500r001c60
Huawei Nip6300 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Nip6300	All versions

Configuration D

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6600 Firmware	Version v500r001c30
Huawei Nip6600 Firmware	Version v500r001c60
Huawei Nip6600 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Nip6600	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6800 Firmware	Version v500r001c60
Huawei Nip6800 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Nip6800	All versions

Configuration F

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6300 Firmware	Version v500r001c30
Huawei Secospace Usg6300 Firmware	Version v500r001c60
Huawei Secospace Usg6300 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Secospace Usg6300	All versions

Configuration G

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6500 Firmware	Version v500r001c30
Huawei Secospace Usg6500 Firmware	Version v500r001c60
Huawei Secospace Usg6500 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Secospace Usg6500	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6600 Firmware	Version v500r001c30
Huawei Secospace Usg6600 Firmware	Version v500r005c00

Running on/with	Platform Versions
Huawei Secospace Usg6600	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg6000v Firmware	Version v500r003c00

Running on/with	Platform Versions
Huawei Usg6000v	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en

Source: psirt@huawei.com

Vendor Advisory

Timeline

No history available yet.