ZeroHour

CVE-2020-1865

CVSS 3.1
6.5 medium
EPSS
<1%p26
Published
()
Modified
Description

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

Vendors
huawei
Products
cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware, cloudengine 7800 firmware
Weakness
CWE-125
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.