What is CVE-2020-1864?

CVE-2020-1864 is a high-severity vulnerability in Huawei Secospace Antiddos8000, classified under Improper Authentication. CVSS score: 8.1/10. Published 2020-03-20.

How severe is CVE-2020-1864?

High severity. CVSS v3 base score is 8.1 out of 10.

Auth bypass in Huawei Secospace Antiddos8000

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

Vulnerability class: Broken Authentication

EPSS: 0.008 (54.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Secospace_antiddos8000
Huawei Secospace_antiddos8000_firmware — versions v500r001c00, v500r001c20, v500r001c60
N/a Secospace Antiddos8000 — versions V500R001C00,V500R001C20,V500R001C60,V500R005C00

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1864?: CVE-2020-1864 is a high-severity vulnerability in Huawei Secospace Antiddos8000, classified under Improper Authentication. CVSS score: 8.1/10. Published 2020-03-20.
How severe is CVE-2020-1864?: High severity. CVSS v3 base score is 8.1 out of 10.