CVE-2020-1818

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
HuaweiIPS ModuleV500R001C30; V500R001C60; V500R005C00
HuaweiNGFW ModuleV500R002C00; V500R002C20; V500R005C00
HuaweiNIP6300V500R001C30; V500R001C60; V500R005C00
HuaweiNIP6600V500R001C30; V500R001C60; V500R005C00
HuaweiNIP6800V500R001C60; V500R005C00
HuaweiSecospace USG6300V500R001C30; V500R001C60; V500R005C00
HuaweiSecospace USG6500V500R001C30; V500R001C60; V500R005C00
HuaweiSecospace USG6600V500R001C30; V500R005C00
HuaweiUSG6000VV500R003C00

References

Timeline

Published
Dec 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2020

CVE-2020-181847.2In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by pCVE-2020-181859.8class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.CVE-2020-18195.3There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some CVE-2020-181909.1Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-pictureCVE-2020-181919.1GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/lCVE-2020-181946.1Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new bCVE-2020-181958.8Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via thCVE-2020-181988.8Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the cCVE-2020-18205.3There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some CVE-2020-18215.3There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some CVE-2020-182158.8Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, whicCVE-2020-18225.3There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some
CVE-2020-1818: Medium severity, CVSS 5.3 | Vulnix