SB2020020515 - Multiple vulnerabilities in Some Huawei Products

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020020515

SB2020020515 - Multiple vulnerabilities in Some Huawei Products

Published: February 5, 2020 Updated: February 19, 2020

Security Bulletin ID SB2020020515
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 10
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 30% Low 70%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 10 vulnerabilities.


1) Information disclosure (CVE-ID: CVE-2020-1857)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to improper processing of some data. A local user can exploit this vulnerability through a series of operations and gain unauthorized access to sensitive information on the system.


2) Memory leak (CVE-ID: CVE-2020-1813)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to perform (DoS) attack on the target system.

The vulnerability exists due to the affected software does not sufficiently track and release allocated memory while parse certain message. A remote authenticated attacker can trigger memory consumption and cause a denial of service condition.


3) Out-of-bounds read (CVE-ID: CVE-2020-1830)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when IPSec Module handing a specific message. A remote attacker can send specific message, trigger 1 byte out-of-bounds read error and compromise normal service.


4) Input validation error (CVE-ID: CVE-2020-1828)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when the IPSec module does not validate a field in a specific message. A remote attacker can send a specially crafted message, cause out-of-bound read and compromise normal service.


5) Input validation error (CVE-ID: CVE-2020-1814)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when processing specific IPSEC packets. A remote attacker can send a specially crafted IPSEC packet to affected devices and cause the IPSEC function of the affected device abnormal.


6) Input validation error (CVE-ID: CVE-2020-1816)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper processing of specific IPSEC packets. A remote attacker can send specially crafted IPSEC packets to affected devices and cause the IPSEC function of the affected device abnormal.


7) Memory leak (CVE-ID: CVE-2020-1815)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due to the affected software does not sufficiently track and release allocated memory while parse certain message. A remote authenticated attacker can send specially crafted message, consume remaining memory and cause memory exhaust.


8) Improper access control (CVE-ID: CVE-2020-1860)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker on the local network can bypass implemented security restrictions and directly access the Internet.


9) Access of Uninitialized Pointer (CVE-ID: CVE-2020-1877)

CWE-ID: CWE-824 - Access of Uninitialized Pointer

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to the affected software system access an invalid pointer when administrator log in to the device and performs some operations. A local administrator can cause certain process reboot.


10) Out-of-bounds read (CVE-ID: CVE-2020-1876)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when processing packets. A remote attacker on the local network can send a specially crafted packet with specific parameter, trigger out-of-bounds read error and cause the device reboot.


Remediation

Install update from vendor's website.

References