There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)
The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
IPS Module
Vendor
Huawei
Product
IPS Module
Platforms
Unknown
Default status
unaffected
IPS Module · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C30
affected
Unavailable
Unavailable
Unavailable
None listed
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
NGFW Module
Vendor
Huawei
Product
NGFW Module
Platforms
Unknown
Default status
unaffected
NGFW Module · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R002C00
affected
Unavailable
Unavailable
Unavailable
None listed
V500R002C20
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
NIP6300
Vendor
Huawei
Product
NIP6300
Platforms
Unknown
Default status
unaffected
NIP6300 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C30
affected
Unavailable
Unavailable
Unavailable
None listed
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
NIP6600
Vendor
Huawei
Product
NIP6600
Platforms
Unknown
Default status
unaffected
NIP6600 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C30
affected
Unavailable
Unavailable
Unavailable
None listed
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
NIP6800
Vendor
Huawei
Product
NIP6800
Platforms
Unknown
Default status
unaffected
NIP6800 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
Secospace USG6300
Vendor
Huawei
Product
Secospace USG6300
Platforms
Unknown
Default status
unaffected
Secospace USG6300 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C30
affected
Unavailable
Unavailable
Unavailable
None listed
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
Secospace USG6500
Vendor
Huawei
Product
Secospace USG6500
Platforms
Unknown
Default status
unaffected
Secospace USG6500 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V500R001C30
affected
Unavailable
Unavailable
Unavailable
None listed
V500R001C60
affected
Unavailable
Unavailable
Unavailable
None listed
V500R005C00
affected
Unavailable
Unavailable
Unavailable
None listed
Secospace USG6600
Vendor
Huawei
Product
Secospace USG6600
Platforms
Unknown
Default status
unaffected
Secospace USG6600 · Scoped product and version facts