cbcvebase.
CVE-2020-1841
published 2020-02-17

CVE-2020-1841: Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions…

PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.97%
58.0th percentile
Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.

Affected

24 ranges
VendorProductVersion rangeFixed in
huaweicloudlink_board——
huaweicloudlink_board_firmware——
huaweidp300——
huaweidp300_firmware——
huaweirse6500——
huaweirse6500——
huaweirse6500——
huaweirse6500_firmware——
huaweirse6500_firmware——
huaweirse6500_firmware——
huaweite60——
huaweite60——
huaweite60——
huaweite60——
huaweite60——
huaweite60——
huaweite60——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——
huaweite60_firmware——

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.