CVE-2020-1824

Vulnerability

Multiple out-of-bounds (OOB) read vulnerabilities exist in the Common Open Policy Service (COPS) protocol implementation of certain Huawei products, including the IPS Module. The flaw resides in a specific decoding function that fails to properly validate input, leading to an OOB read when processing a crafted data packet. Affected versions include V500R001C30, V500R001C60, and V500R005C00 among others. These vulnerabilities are tracked as seven CVEs (CVE-2020-1818 through CVE-2020-1824) and multiple Huawei PSIRT IDs [1].

Exploitation

An attacker can exploit these vulnerabilities by sending a specially crafted COPS packet to an affected device over the network. No authentication is required, making the attack remotely exploitable. The attacker does not need any prior access or privileges, only network connectivity to the target device [1].

Impact

Successful exploitation results in an out-of-bounds read, which can cause the affected device's service to become disrupted. The impact is a denial of service (DoS) condition, potentially affecting the availability of the device. There is no indication of code execution or data compromise [1].

Mitigation

Huawei has released software updates to fix these vulnerabilities. For the IPS Module, the resolved version is V500R005C20SPC500. Other affected products have corresponding fixed versions detailed in the advisory. Users are advised to upgrade to the latest firmware versions. No workarounds are documented. The advisory is available at [1].