CVE-2020-1865

Summary

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

Affected Software

VendorProductVersion RangeStatus
n/aCloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800affected
n/aCloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800affected

Weaknesses

  • Out-of-Bounds Read

ADP Enrichment

CVE Program Container

Additional References

References