CVE-2020-1822

Vulnerability

The Common Open Policy Service (COPS) protocol implementation in certain Huawei products contains multiple out-of-bounds (OOB) read vulnerabilities. The specific decoding function performs an OOB read when processing a crafted incoming data packet. Affected products include the IPS Module in versions V500R001C30, V500R001C60, V500R005C00, and other versions listed in the advisory [1]. These vulnerabilities are tracked as CVE-2020-1818 through CVE-2020-1824, with CVE-2020-1822 being one of them.

Exploitation

An attacker can exploit these vulnerabilities by sending a specially crafted COPS packet to an affected device. No authentication is required if the COPS service is exposed to the network. The attacker only needs network access to deliver the malicious packet. The OOB read occurs during packet decoding, which can lead to a crash or service disruption.

Impact

Successful exploitation results in denial of service (DoS) due to disruption of the affected device's service. The OOB read may cause the device to become unresponsive or restart, impacting availability. There is no indication of code execution or information disclosure beyond the out-of-bounds memory read.

Mitigation

Huawei has released software updates to fix these vulnerabilities. For the IPS Module, the resolved version is V500R005C20SPC500. Users should upgrade to the fixed version as listed in the security advisory [1]. No workarounds are provided. The advisory was published in 2020, and patches are available for all affected versions.