VYPR
← All advisories
Low severity3.7NVD Advisory· Published Dec 28, 2024· Updated Jun 17, 2026

CVE-2020-1824

CVE-2020-1824

Description

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289)

The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

33
  • Huawei/Ips Module Firmware4 versions
    cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:huawei:ips_module_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ips_module_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ips_module_firmware:v500r005c00:*:*:*:*:*:*:*
    • (no CPE)range: V500R001C30
  • Huawei/Ngfw Module Firmware4 versions
    cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c00:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ngfw_module_firmware:v500r002c20:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00:*:*:*:*:*:*:*
    • (no CPE)range: V500R002C00
  • Huawei/Nip6300 Firmware3 versions
    cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:nip6300_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:nip6300_firmware:v500r005c00:*:*:*:*:*:*:*
  • Huawei/Nip6600 Firmware3 versions
    cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:nip6600_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:nip6600_firmware:v500r005c00:*:*:*:*:*:*:*
  • Huawei/Nip6800 Firmware2 versions
    cpe:2.3:o:huawei:nip6800_firmware:v500r001c60:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:huawei:nip6800_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:nip6800_firmware:v500r005c00:*:*:*:*:*:*:*
  • Huawei/Secospace Usg6300 Firmware4 versions
    cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00:*:*:*:*:*:*:*
    • (no CPE)range: V500R001C30
  • Huawei/Secospace Usg6500 Firmware4 versions
    cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00:*:*:*:*:*:*:*
    • (no CPE)range: V500R001C30
  • Huawei/Secospace Usg6600 Firmware3 versions
    cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*
    • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00:*:*:*:*:*:*:*
    • (no CPE)range: V500R001C30
  • Huawei/Usg6000v Firmware
    cpe:2.3:o:huawei:usg6000v_firmware:v500r003c00:*:*:*:*:*:*:*
  • Huawei/Common Open Policy Service Protocol (COPS) modulellm-fuzzy
  • Huawei/NIP6300cpe-rescue
    Range: V500R001C30
  • Huawei/NIP6600cpe-rescue
    Range: V500R001C30
  • Huawei/NIP6800cpe-rescue
    Range: V500R001C60
  • Huawei/USG6000Vcpe-rescue
    Range: V500R003C00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.