deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-3862
Published: 2020-02-27
Description: A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html; https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210947
CVE: CVE-2020-3865
Published: 2020-02-27
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html; https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210947
CVE: CVE-2020-3866
Published: 2020-02-27
Description: This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-3867
Published: 2020-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html; https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210947
CVE: CVE-2020-3868
Published: 2020-02-27
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html; https://security.gentoo.org/glsa/202003-22; https://support.apple.com/HT210920
CVE: CVE-2020-3869
Published: 2020-02-27
Description: An issue existed in the handling of the local user's self-view. The issue was corrected with improved logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A remote FaceTime user may be able to cause the local user's camera self-view to display the incorrect camera.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/HT210918; https://support.apple.com/HT210918
CVE: CVE-2020-3870
Published: 2020-02-27
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210918; https://support.apple.com/HT210919; https://support.apple.com/HT210920
CVE: CVE-2020-3871
Published: 2020-02-27
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-3872
Published: 2020-02-27
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/HT210918; https://support.apple.com/HT210919; https://support.apple.com/HT210920
CVE: CVE-2020-3873
Published: 2020-02-27
Description: This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/HT210918; https://support.apple.com/HT210918
CVE: CVE-2020-3874
Published: 2020-02-27
Description: An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-212
References: https://support.apple.com/HT210918; https://support.apple.com/HT210918
CVE: CVE-2020-3875
Published: 2020-02-27
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210918; https://support.apple.com/HT210919; https://support.apple.com/HT210920
CVE: CVE-2020-3877
Published: 2020-02-27
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210919; https://support.apple.com/HT210921; https://support.apple.com/HT210919
CVE: CVE-2020-3878
Published: 2020-02-27
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT211168; https://support.apple.com/HT211170; https://support.apple.com/HT211171
CVE: CVE-2020-7061
Published: 2020-02-27
Description: In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated buffer. This could potentially lead to information disclosure or crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugs.php.net/bug.php?id=79171; https://security.gentoo.org/glsa/202003-57; https://www.tenable.com/security/tns-2021-14
CVE: CVE-2020-7062
Published: 2020-02-27
Description: In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and the file upload fails, the upload procedure would try to clean up data that does not exist and encounter null pointer dereference, which would likely lead to a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html; https://bugs.php.net/bug.php?id=79221; https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html
CVE: CVE-2020-7063
Published: 2020-02-27
Description: In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281, CWE-281
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html; https://bugs.php.net/bug.php?id=79082; https://lists.debian.org/debian-lts-announce/2020/03/msg00034.html
CVE: CVE-2018-8877
Published: 2020-02-27
Description: Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md; https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md
CVE: CVE-2018-8878
Published: 2020-02-27
Description: Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md; https://github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.md
CVE: CVE-2020-6383
Published: 2020-02-27
Description: Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://access.redhat.com/errata/RHSA-2020:0738; https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html; https://crbug.com/1051017
CVE: CVE-2020-6384
Published: 2020-02-27
Description: Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://access.redhat.com/errata/RHSA-2020:0738; https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html; https://crbug.com/1048473
CVE: CVE-2020-6386
Published: 2020-02-27
Description: Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://access.redhat.com/errata/RHSA-2020:0738; https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html; https://crbug.com/1043603
CVE: CVE-2020-6407
Published: 2020-02-27
Description: Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2020:0738; https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html; https://crbug.com/1045931
CVE: CVE-2020-6418
Published: 2020-02-27
Description: Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://packetstormsecurity.com/files/156632/Google-Chrome-80-JSCreate-Side-Effect-Type-Confusion.html; https://access.redhat.com/errata/RHSA-2020:0738; https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html
CVE: CVE-2020-9428
Published: 2020-02-27
Description: In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16397; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9fe2de783dbcbe74144678d60a4e[PII_REDACTED]b2
CVE: CVE-2020-9429
Published: 2020-02-27
Description: In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571
CVE: CVE-2020-9430
Published: 2020-02-27
Description: In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383
CVE: CVE-2020-9431
Published: 2020-02-27
Description: In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16341; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=086003c9d616906e08bbeeab9c17b3aa4c6ff850
CVE: CVE-2020-9432
Published: 2020-02-27
Description: openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca; https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca
CVE: CVE-2020-9433
Published: 2020-02-27
Description: openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca; https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca
CVE: CVE-2020-9434
Published: 2020-02-27
Description: openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca; https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca
CVE: CVE-2019-3698
Published: 2020-02-28
Description: UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html; https://bugzilla.suse.com/show_bug.cgi?id=1156309
CVE: CVE-2019-8741
Published: 2020-02-28
Description: A denial of service issue was addressed with improved input validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://eprint.iacr.org/2019/1421; https://support.apple.com/HT210604; https://support.apple.com/HT210606
CVE: CVE-2020-9399
Published: 2020-02-28
Description: The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-436
References: https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html; https://seclists.org/fulldisclosure/2020/Feb/35; https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html
CVE: CVE-2020-9442
Published: 2020-02-28
Description: OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://github.com/hessandrew/CVE-2020-9442; https://github.com/hessandrew/CVE-2020-9442
CVE: CVE-2019-10064
Published: 2020-02-28
Description: hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.
CVSS Score: 7.5 (HIGH)
CWE: CWE-331
References: http://packetstormsecurity.com/files/156573/Hostapd-Insufficient-Entropy.html; http://seclists.org/fulldisclosure/2020/Feb/26; http://www.openwall.com/lists/oss-security/2020/02/27/1
CVE: CVE-2020-9447
Published: 2020-02-28
Description: There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which would result in XSS. Cross-site scripting enables attackers to steal data, change the appearance of a website, and perform other malicious activities like phishing or drive-by hacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/manolo/gwtupload/issues/32; https://www.coresecurity.com/advisories/gwtupload-xss-file-upload-functionality; https://github.com/manolo/gwtupload/issues/32
CVE: CVE-2020-5247
Published: 2020-02-28
Description: In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e. `CR`, `LF` or`/r`, `/n`) to end the header and inject malicious content, such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself, response splitting is a vector for several other attacks, such as cross-site scripting (XSS). This is related to CVE-2019-16254, which fixed this vulnerability for the WEBrick Ruby web server. This has been fixed in versions 4.3.2 and 3.12.3 by checking all headers for line endings and rejecting headers with those characters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-113, CWE-74
References: https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v; https://lists.debian.org/debian-lts-announce/2022/05/msg00034.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMJ3CGZ3DLBJ5WUUKMI5ZFXFJQMXJZIK/
CVE: CVE-2020-9463
Published: 2020-02-28
Description: Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remote request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://code610.blogspot.com/2020/02/postauth-rce-in-centreon-1910.html; https://code610.blogspot.com/2020/02/postauth-rce-in-centreon-1910.html
CVE: CVE-2020-1792
Published: 2020-02-28
Description: Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200226-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200226-01-smartphone-en
CVE: CVE-2020-1844
Published: 2020-02-28
Description: PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
CVSS Score: 7.8 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200221-01-pcmanager-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200221-01-pcmanager-en
CVE: CVE-2020-1860
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-firewall-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-firewall-en
CVE: CVE-2020-1861
Published: 2020-02-28
Description: CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.
CVSS Score: 4.4 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en
CVE: CVE-2020-1873
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofboundread-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofboundread-en
CVE: CVE-2020-1874
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-invalidpointer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-invalidpointer-en