8.1
CVE-2020-1864
- EPSS 0.38%
- Veröffentlicht 20.03.2020 15:15:14
- Zuletzt bearbeitet 21.11.2024 05:11:30
- Quelle psirt@huawei.com
- Teams Watchlist Login
- Unerledigt Login
Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Secospace Antiddos8000 Firmware Versionv500r001c00
Huawei ≫ Secospace Antiddos8000 Firmware Versionv500r001c20
Huawei ≫ Secospace Antiddos8000 Firmware Versionv500r001c60
Huawei ≫ Secospace Antiddos8000 Firmware Versionv500r005c00
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.38% | 0.585 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.2 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.