CVE-2020-1870
published 2020-05-29CVE-2020-1870: There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.74%
50.7th percentile
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | cloudengine_12800 | — | — |
| huawei | cloudengine_12800_firmware | — | — |
| huawei | cloudengine_12800_firmware | — | — |
| huawei | cloudengine_12800_firmware | — | — |
| huawei | cloudengine_12800_firmware | — | — |
| huawei | cloudengine_5800 | — | — |
| huawei | cloudengine_6800 | — | — |
| huawei | cloudengine_6800 | — | — |
| huawei | cloudengine_6800_firmware | — | — |
| huawei | cloudengine_7800 | — | — |
| huawei | ne40e | — | — |
| huawei | ne40e | — | — |
| huawei | ne40e | — | — |
| huawei | ne40e-f | — | — |
| huawei | ne40e-f | — | — |
| huawei | ne40e-m | — | — |
| huawei | ne40e-m | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
ListSERV Maestro <= 9.0-8 RCE
nuclei·CVSS 5.0
CVE-2010-1870 [MEDIUM] ListSERV Maestro <= 9.0-8 RCE
ListSERV Maestro <= 9.0-8 RCE
A struts-based OGNL remote code execution vulnerability exists in ListSERV Maestro before and including version 9.0-8.
Template:
id: CVE-2010-1870
info:
name: ListSERV Maestro <= 9.0-8 RCE
author: b0yd
severity: medium
description: A struts-based OGNL remote code execution vulnerability exists in ListSERV Maestro before and including version 9.0-8.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.
remediation: |
Upgrade to a patched version of ListSERV Maestro that is not affected by this vulnerability.
reference:
- https://www.securifera.com/advisories/sec-2020-0001/
- https://packetstormsecurity.com/files/159643/listservmaestro-exec.txt
- https://www.exploit-db.com/exploits/1
No writeups or analysis indexed.
2020-05-29
Published