Lucene search

[email protected]CVE-2020-9124

HistoryDec 29, 2020 - 6:15 p.m.

CVE-2020-9124

2020-12-2918:15:13

CWE-401

[email protected]

web.nvd.nist.gov

cve-2020-9124

huawei

cloudengine

memory leak

vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.9%

JSON

There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.

Affected configurations

NVD

Node

huaweicloudengine_12800_firmwareMatchv200r002c50spc800

huaweicloudengine_12800_firmwareMatchv200r003c00spc810

huaweicloudengine_12800_firmwareMatchv200r005c00spc800

huaweicloudengine_12800_firmwareMatchv200r005c10spc800

AND

huaweicloudengine_12800Match-

Node

huaweicloudengine_5800_firmwareMatchv200r002c50spc800

huaweicloudengine_5800_firmwareMatchv200r003c00spc810

huaweicloudengine_5800_firmwareMatchv200r005c00spc800

huaweicloudengine_5800_firmwareMatchv200r005c10spc800

AND

huaweicloudengine_5800Match-

Node

huaweicloudengine_6800_firmwareMatchv200r002c50spc800

huaweicloudengine_6800_firmwareMatchv200r003c00spc810

huaweicloudengine_6800_firmwareMatchv200r005c00spc800

huaweicloudengine_6800_firmwareMatchv200r005c10spc800

AND

huaweicloudengine_6800Match-

Node

huaweicloudengine_7800_firmwareMatchv200r002c50spc800

huaweicloudengine_7800_firmwareMatchv200r003c00spc810

huaweicloudengine_7800_firmwareMatchv200r005c00spc800

huaweicloudengine_7800_firmwareMatchv200r005c10spc800

AND

huaweicloudengine_7800Match-

CPENameOperatorVersion
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r002c50spc800
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r003c00spc810
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c00spc800
huawei:cloudengine_12800_firmwarehuawei cloudengine 12800 firmwareeqv200r005c10spc800

CPE	Name	Operator	Version
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r002c50spc800
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r003c00spc810
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c00spc800
huawei:cloudengine_12800_firmware	huawei cloudengine 12800 firmware	eq	v200r005c10spc800

CNA Affected

[
  {
    "product": "CloudEngine 12800",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800"
      },
      {
        "status": "affected",
        "version": "V200R003C00SPC810"
      },
      {
        "status": "affected",
        "version": "V200R005C00SPC800"
      },
      {
        "status": "affected",
        "version": "V200R005C10SPC800"
      }
    ]
  },
  {
    "product": "CloudEngine 5800",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800"
      },
      {
        "status": "affected",
        "version": "V200R003C00SPC810"
      },
      {
        "status": "affected",
        "version": "V200R005C00SPC800"
      },
      {
        "status": "affected",
        "version": "V200R005C10SPC800"
      }
    ]
  },
  {
    "product": "CloudEngine 6800",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800"
      },
      {
        "status": "affected",
        "version": "V200R003C00SPC810"
      },
      {
        "status": "affected",
        "version": "V200R005C00SPC800"
      },
      {
        "status": "affected",
        "version": "V200R005C10SPC800"
      }
    ]
  },
  {
    "product": "CloudEngine 7800",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800"
      },
      {
        "status": "affected",
        "version": "V200R003C00SPC810"
      },
      {
        "status": "affected",
        "version": "V200R005C00SPC800"
      },
      {
        "status": "affected",
        "version": "V200R005C10SPC800"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20201223-01-cloudengine-en

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.9%

JSON

Related for CVE-2020-9124

cvelist1 openvas1 huawei1 prion1 nvd1