VulnerabilityModified

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication.

HIGH 8.1EPSS 0.81%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.81%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

CVSS 3.1: 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.81% probability · 55th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: huawei/secospace antiddos8000 firmware
Source: psirt@huawei.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.