PT-2020-5960

CVE-2020-1870

·

Published

2020-05-27

·

Updated

2020-11-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions CloudEngine 12800 versions V200R019C00SPC800 CloudEngine 5800 versions V200R019C00SPC800 CloudEngine 6800 versions V200R005C20SPC800 through V200R019C00SPC800 CloudEngine 7800 versions V200R019C00SPC800 NE40E versions V800R011C00SPC200 through V800R011C10SPC100 NE40E-F versions V800R011C00SPC200 through V800R011C10SPC100 NE40E-M versions V800R011C00SPC200 through V800R011C10SPC100
Description The issue is related to improper memory management, which may cause memory leakage in certain cases. Attackers can exploit this by performing a series of operations, potentially leading to a denial of service.
Recommendations For CloudEngine 12800 version V200R019C00SPC800, update to a version that includes the fix for this issue. For CloudEngine 5800 version V200R019C00SPC800, update to a version that includes the fix for this issue. For CloudEngine 6800 versions V200R005C20SPC800 through V200R019C00SPC800, update to a version that includes the fix for this issue. For CloudEngine 7800 version V200R019C00SPC800, update to a version that includes the fix for this issue. For NE40E versions V800R011C00SPC200 through V800R011C10SPC100, update to a version that includes the fix for this issue. For NE40E-F versions V800R011C00SPC200 through V800R011C10SPC100, update to a version that includes the fix for this issue. For NE40E-M versions V800R011C00SPC200 through V800R011C10SPC100, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the affected products until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾