PT-2020-15114 · Huawei · Te60+3

Published 2020-02-17 · Updated 2021-07-21 · CVE-2020-1841

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei CloudLink Board version 20.0.0 DP300 version V500R002C00 RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900 TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100

Description The issue allows an unauthenticated, remote attacker to make a large number of attempts to guess information, potentially leading to an information leak. Successful exploitation may cause information leak.

Recommendations For Huawei CloudLink Board version 20.0.0, update to a version that addresses the information leak issue. For DP300 version V500R002C00, update to a version that addresses the information leak issue. For RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900, update to a version that addresses the information leak issue. For TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100, update to a version that addresses the information leak issue.

Fix

Related Identifiers

CVE-2020-1841

Affected Products

Dp300

Huawei Cloudlink Board

Rse6500

Te60

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200207-01-te-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1841 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1841 · Vendor Advisory