CVE-2020-1863 — Huawei / Huawei USG6000V

Description (CNA)

Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products.

Affected (CNA)

Vendor / product	Versions
Huawei / Huawei USG6000V	affected V500R001C20SPC300; affected V500R003C00SPC100; affected V500R005C00SPC100

CWE

No CWE identifiers supplied.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en

ADP enrichment

CVE

No English description supplied.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en