PT-2020-15126 · Huawei · Cloudengine 12800+1

Published 2020-02-19 · Updated 2021-07-21 · CVE-2020-1861

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CloudEngine 12800 versions V200R001C00SPC600 through V200R005C10SPC300

Description The issue is related to an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.

Recommendations For CloudEngine 12800 versions V200R001C00SPC600 through V200R005C10SPC300, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-1861

Affected Products

Cloudengine 12800

Huawei Vrp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1861 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1861 · Vendor Advisory
• https://t.me/cvenotify/1284 · Telegram Post