CVE-2020-1820

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability ID: HWPSIRT-2018-12275,HWPSIRT-2018-12276,HWPSIRT-2018-12277,HWPSIRT-2018-12278,HWPSIRT-2018-12279,HWPSIRT-2018-12280 and HWPSIRT-2018-12289) The seven vulnerabilities have been assigned seven Common Vulnerabilities and Exposures (CVE) IDs: CVE-2020-1818, CVE-2020-1819, CVE-2020-1820, CVE-2020-1821, CVE-2020-1822, CVE-2020-1823 and CVE-2020-1824.

• CWE-125
• CWE-125

• https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20191218-01-cops-enVendor Advisory

Published

Dec 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1819There are multiple out of bounds (OOB) read vulnerabilities …5.3
• CVE-2020-18190Bludit v3.8.1 is affected by directory traversal. Remote att…9.1
• CVE-2020-18191GetSimpleCMS-3.3.15 is affected by directory traversal. Remo…9.1
• CVE-2020-18194Cross Site Scripting (XSS) in emlog v6.0.0 allows remote att…6.1
• CVE-2020-18195Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows…8.8
• CVE-2020-18198Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows…8.8
• CVE-2020-1821There are multiple out of bounds (OOB) read vulnerabilities …5.3
• CVE-2020-18215Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phps…8.8
• CVE-2020-1822There are multiple out of bounds (OOB) read vulnerabilities …5.3
• CVE-2020-18220Weak Encoding for Password in DoraCMS v2.1.1 and earlier all…7.5
• CVE-2020-18221Cross Site Scripting (XSS) in Typora v0.9.65 and earlier all…6.1
• CVE-2020-18229Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote a…4.8