Lucene search

[email protected]CVE-2020-1861

HistoryFeb 28, 2020 - 7:15 p.m.

CVE-2020-1861

2020-02-2819:15:11

[email protected]

web.nvd.nist.gov

cve-2020-1861

cloudengine 12800

information leakage vulnerability

huawei products

authenticated attacker

software

information leakage

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.

Affected configurations

NVD

Node

huaweicloudengine_12800_firmwareMatchv200r001c00spc600

huaweicloudengine_12800_firmwareMatchv200r001c00spc700

huaweicloudengine_12800_firmwareMatchv200r002c01

huaweicloudengine_12800_firmwareMatchv200r002c50spc800

huaweicloudengine_12800_firmwareMatchv200r002c50spc800pwe

huaweicloudengine_12800_firmwareMatchv200r003c00spc810

huaweicloudengine_12800_firmwareMatchv200r003c00spc810pwe

huaweicloudengine_12800_firmwareMatchv200r005c00spc600

huaweicloudengine_12800_firmwareMatchv200r005c00spc800

huaweicloudengine_12800_firmwareMatchv200r005c00spc800pwe

huaweicloudengine_12800_firmwareMatchv200r005c10

huaweicloudengine_12800_firmwareMatchv200r005c10spc300

AND

huaweicloudengine_12800Match-

CPENameOperatorVersion
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r001c00spc600
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r001c00spc700
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r002c01
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r002c50spc800
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r002c50spc800pwe
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r003c00spc810
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r003c00spc810pwe
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c00spc600
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c00spc800
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c00spc800pwe

CPE	Name	Operator	Version
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r001c00spc600
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r001c00spc700
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r002c01
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r002c50spc800
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r002c50spc800pwe
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r003c00spc810
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r003c00spc810pwe
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c00spc600
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c00spc800
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c00spc800pwe

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "CloudEngine 12800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2020-1861

prion1 openvas1 cvelist1 nvd1 huawei1