CVE-2020-1863 - Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability

Back Back to CVE browser

HIGH

Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability

Published Mar 12, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.93%

Description

Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products.

Affected products

Vendor Huawei Product Huawei USG6000V Default
unknown
Affected
- V500R001C20SPC300
- V500R003C00SPC100
- V500R005C00SPC100

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Huawei	Huawei USG6000V	unknown	Affected V500R001C20SPC300 V500R003C00SPC100 V500R005C00SPC100

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12689
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12689		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Mar 12, 2020

Updated Aug 4, 2024

Reserved Nov 29, 2019

Link CVE-2020-1863

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-1863

Red Hat

No data

ENISA EUVD

Assigner huawei

Published Mar 12, 2020

Updated Aug 4, 2024

Link EUVD-2020-12689

GitHub

No data