CVE-2020-1820

Vulnerability

Multiple out-of-bounds (OOB) read vulnerabilities exist in the Common Open Policy Service (COPS) protocol implementation of certain Huawei products [1]. The flaws reside in the specific decoding function that processes incoming COPS data packets. Affected products include the IPS Module running versions V500R001C30, V500R001C60, and V500R005C00 [1]. The vulnerabilities are tracked under CVE-2020-1818 through CVE-2020-1824, with this entry covering CVE-2020-1820 [1].

Exploitation

An attacker can exploit these vulnerabilities by sending a specially crafted COPS packet to an affected device [1]. No prior authentication is required; the attacker only needs network access to deliver the malicious packet. The decoding function fails to properly validate input lengths, leading to an out-of-bounds read when parsing the crafted data [1].

Impact

Successful exploitation causes a denial of service (DoS) condition on the targeted device [1]. The out-of-bounds read can trigger an unexpected behavior in the COPS processing module, disrupting normal service. The impact is limited to availability; no code execution or information disclosure is indicated in the available references [1].

Mitigation

Huawei has released software updates to address these vulnerabilities [1]. The resolved version for IPS Module V500R001C30 is V500R005C20SPC500; other affected versions should be upgraded to the fixed releases listed in the vendor advisory [1]. Users should apply the available patches as soon as possible. No workarounds are documented.