CVE-2020-1865

🗓️ 13 Jan 2021 23:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation

Reporter	Title	Published	Views	Family All 9
CNNVD	Huawei CloudEngine Buffer Error Vulnerability	30 Dec 202000:00	–	cnnvd
CVE	CVE-2020-1865	13 Jan 202122:20	–	cve
Cvelist	CVE-2020-1865	13 Jan 202122:20	–	cvelist
EUVD	EUVD-2020-12691	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Out-of-Bounds Read Vulnerability in Huawei CloudEngine Products	30 Dec 202000:00	–	huawei
OpenVAS	Out-of-Bounds Read Vulnerability in Huawei CloudEngine Products (huawei-sa-20201230-02-cloudengine)	21 Dec 202300:00	–	openvas
OSV	CVE-2020-1865	13 Jan 202123:15	–	osv
Prion	Out-of-bounds	13 Jan 202123:15	–	prion
RedhatCVE	CVE-2020-1865	22 May 202516:27	–	redhatcve

NVD

Node

huawei cloudengine_12800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_12800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_12800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_12800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_12800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_12800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_12800Match-

Node

huawei cloudengine_5800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_5800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_5800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_5800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_5800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_5800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_5800Match-

Node

huawei cloudengine_6800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_6800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_6800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_6800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_6800_firmwareMatchv200r005c20spc800

OR

huawei cloudengine_6800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_6800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_6800Match-

Node

huawei cloudengine_7800_firmwareMatchv200r002c50spc800

OR

huawei cloudengine_7800_firmwareMatchv200r003c00spc810

OR

huawei cloudengine_7800_firmwareMatchv200r005c00spc800

OR

huawei cloudengine_7800_firmwareMatchv200r005c10spc800

OR

huawei cloudengine_7800_firmwareMatchv200r019c00spc800

OR

huawei cloudengine_7800_firmwareMatchv200r019c10spc800

AND

huawei cloudengine_7800Match-

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-02-cloudengine-en

21 Nov 2024 05:11Current

6.5Medium risk

Vulners AI Score6.5

CVSS 23.3

CVSS 3.16.5

EPSS0.00044

huawei cloudengine out-of-bounds read vulnerability crafted pim messages adjacent attacker