CVE-2020-1799 - E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability

Back Back to CVE browser

HIGH

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability

Published May 21, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.37%

Description

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12625
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12625		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en		x_refsource_MISCVendor Advisory