8.1

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c00
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c20
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c60
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r005c00
   Huawei ≫ Secospace Antiddos8000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.52
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en
Vendor Advisory