rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-1814 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability. An authenticated attacker may do some special operations in the affected products in some special scenarios to exploit the vulnerability. Due to improper race conditions of different operations, successful exploit will lead to Dangling pointer dereference, causing some service abnormal.
Problem types: description: Dangling Pointer Reference
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600, USG9500
Published: 2020-02-18T01:53:40.000Z
CVE-2020-1815 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while parse certain message, the attacker sends the message continuously that could consume remaining memory. Successful exploit could cause memory exhaust.
Problem types: description: Memory Leak
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600, USG9500
Published: 2020-02-17T23:18:39.000Z
CVE-2020-1816 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attackers can send constructed IPSEC packets to affected devices to exploit this vulnerability. Successful exploit could cause the IPSec function of the affected device abnormal.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600, USG9500
Published: 2020-02-17T23:24:30.000Z
CVE-2020-1817 
Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: PCManager
Published: 2020-04-30T21:23:23.000Z
CVE-2020-1818 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-27T10:02:45.710Z
CVE-2020-1819 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-27T10:05:47.224Z
CVE-2020-1820 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-28T06:11:17.446Z
CVE-2020-1821 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-28T06:16:58.770Z
CVE-2020-1822 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-28T06:21:04.473Z
CVE-2020-1823 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-28T06:29:49.051Z
CVE-2020-1824 
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.
Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: Huawei
product: IPS Module
default_status: unaffected
vendor: Huawei
product: NGFW Module
default_status: unaffected
vendor: Huawei
product: NIP6300
default_status: unaffected
vendor: Huawei
product: NIP6600
default_status: unaffected
vendor: Huawei
product: NIP6800
default_status: unaffected
vendor: Huawei
product: Secospace USG6300
default_status: unaffected
vendor: Huawei
product: Secospace USG6500
default_status: unaffected
vendor: Huawei
product: Secospace USG6600
default_status: unaffected
vendor: Huawei
product: USG6000V
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-28T06:37:14.149Z
CVE-2020-1825 
FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.
Problem types: description: DoS
Affected products: vendor: n/a
product: FusionAccess
Published: 2020-06-15T15:01:08.000Z
CVE-2020-1826 
Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information.
Problem types: description: Information Leak
Affected products: vendor: Huawei
product: Honor Magic2
Published: 2020-01-09T16:40:03.000Z
CVE-2020-1827 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600, USG9500
Published: 2020-02-17T20:38:59.000Z
CVE-2020-1828 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.
Problem types: description: Input Validation
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: USG9500
Published: 2020-02-17T19:49:51.000Z
CVE-2020-1829 
Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service.
Problem types: description: Double Free Memory
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: USG9500
Published: 2020-02-17T20:16:01.000Z
CVE-2020-1830 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This causes 1 byte out-of-bound read, compromising normal service.
Problem types: description: Small OOB Read
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600, USG9500
Published: 2020-02-17T23:35:02.000Z
CVE-2020-1831 
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance function after a series of operations with a PC.
Problem types: description: Improper Authorization
Affected products: vendor: HUAWEI
product: HUAWEI Mate 20
Published: 2020-05-29T20:13:59.000Z
CVE-2020-1832 
E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution.
Problem types: description: Stack Buffer Overflow
Affected products: vendor: Huawei
product: E6878-370
Published: 2020-05-29T19:06:47.000Z
CVE-2020-1833 
Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.
Problem types: description: Improper Authorization
Affected products: vendor: Huawei
product: Honor 9X
Published: 2020-05-29T19:55:27.000Z
CVE-2020-1834 
HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an insufficient integrity check vulnerability. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device.
Problem types: description: Insufficient Integrity Check
Affected products: vendor: n/a
product: HUAWEI P30;HUAWEI P30 Pro
Published: 2020-06-18T13:57:07.000Z
CVE-2020-1835 
HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cause information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-06-18T13:51:21.000Z
CVE-2020-1836 
HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: HUAWEI P30;HUAWEI P30 Pro
Published: 2020-07-06T18:25:19.000Z
CVE-2020-1837 
ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: ChangXiang 8 Plus
Published: 2020-07-06T17:27:33.000Z
CVE-2020-1838 
HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pass the authentication with the crafted credential.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: HUAWEI Mate 30 Pro
Published: 2020-07-06T18:08:41.000Z
CVE-2020-1839 
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.
Problem types: description: Race Condition
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2020-07-06T18:29:42.000Z
CVE-2020-1840 
HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8)
Problem types: description: Insufficient Authentication
Affected products: vendor: n/a
product: HUAWEI Mate 20
Published: 2020-01-21T18:14:09.000Z
CVE-2020-1841 
Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.
Problem types: description: Information Leak
Affected products: vendor: Huawei
product: CloudLink Board
vendor: Huawei
product: DP300
vendor: Huawei
product: RSE6500
vendor: Huawei
product: TE60
Published: 2020-02-17T20:49:36.000Z
CVE-2020-1842 
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.
Problem types: description: Insufficient Authentication
Affected products: vendor: Huawei
product: HEGE-560
vendor: Huawei
product: OSCA-550, OSCA-550A
vendor: Huawei
product: OSCA-550AX, OSCA-550X
Published: 2020-02-18T03:03:52.000Z