CVE-2020-1819

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

• CWE-125
• CWE-125

• https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-enVendor Advisory

Published

Dec 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-18174A process injection vulnerability in setup.exe of AutoHotkey…9.8
• CVE-2020-18175SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_…9.8
• CVE-2020-18178Path Traversal in HongCMS v4.0.0 allows remote attackers to …9.8
• CVE-2020-1818There are multiple out of bounds (OOB) read vulnerabilities …5.3
• CVE-2020-18184In PluxXml V5.7,the theme edit function /PluXml/core/admin/p…7.2
• CVE-2020-18185class.plx.admin.php in PluXml 5.7 allows attackers to execut…9.8
• CVE-2020-18190Bludit v3.8.1 is affected by directory traversal. Remote att…9.1
• CVE-2020-18191GetSimpleCMS-3.3.15 is affected by directory traversal. Remo…9.1
• CVE-2020-18194Cross Site Scripting (XSS) in emlog v6.0.0 allows remote att…6.1
• CVE-2020-18195Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows…8.8
• CVE-2020-18198Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows…8.8
• CVE-2020-1820There are multiple out of bounds (OOB) read vulnerabilities …5.3