CVE-2020-1823 — Huawei / IPS Module

Description (CNA)

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

Affected (CNA)

Vendor / product	Versions
Huawei / IPS Module	affected V500R001C30; affected V500R001C60; affected V500R005C00
Huawei / NGFW Module	affected V500R002C00; affected V500R002C20; affected V500R005C00
Huawei / NIP6300	affected V500R001C30; affected V500R001C60; affected V500R005C00
Huawei / NIP6600	affected V500R001C30; affected V500R001C60; affected V500R005C00
Huawei / NIP6800	affected V500R001C60; affected V500R005C00
Huawei / Secospace USG6300	affected V500R001C30; affected V500R001C60; affected V500R005C00
Huawei / Secospace USG6500	affected V500R001C30; affected V500R001C60; affected V500R005C00
Huawei / Secospace USG6600	affected V500R001C30; affected V500R005C00
Huawei / USG6000V	affected V500R003C00

CWE

CWE-125

References

https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.