CVE-2020-1819

Vulnerability

Multiple out-of-bounds (OOB) read vulnerabilities exist in the Common Open Policy Service (COPS) protocol implementation of Huawei IPS Module. The specific decoding function reads out-of-bounds when processing a crafted incoming data packet. Affected versions include V500R001C30, V500R001C60, and V500R005C00 (among others) of the IPS Module. These vulnerabilities are tracked as HWPSIRT-2018-12275 through HWPSIRT-2018-12280 and HWPSIRT-2018-12289 [1].

Exploitation

An attacker can exploit these vulnerabilities by sending a specially crafted COPS packet to an affected device. No authentication is required; the attacker only needs network access to the device. The OOB read occurs during packet decoding, potentially causing a denial of service [1].

Impact

Successful exploitation disrupts the service on the affected device, leading to a denial of service. The exact impact is limited to service disruption; no remote code execution or information disclosure is indicated in the advisory [1].

Mitigation

Huawei has released software updates to fix these vulnerabilities. The resolved version for the IPS Module is V500R005C20SPC500. Users should apply the updates to mitigate the risk. Refer to the Huawei security advisory for full details [1].