CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-enVendor Advisory

Published

Mar 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1857Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and …5.5
• CVE-2020-1858Huawei products NIP6800 versions V500R001C30, V500R001C60SPC…7.5
• CVE-2020-1860NIP6800;Secospace USG6600;USG9500 products with versions of …7.5
• CVE-2020-1861CloudEngine 12800 with versions of V200R001C00SPC600,V200R00…4.4
• CVE-2020-1862There is a double free vulnerability in some Huawei products…3.3
• CVE-2020-1863Huawei USG6000V with versions V500R001C20SPC300, V500R003C00…7.5
• CVE-2020-18646Information Disclosure in NoneCMS v1.3 allows remote attacke…7.5
• CVE-2020-18647Information Disclosure in NoneCMS v1.3 allows remote attacke…7.5
• CVE-2020-18648Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows r…8.8
• CVE-2020-1865There is an out-of-bounds read vulnerability in Huawei Cloud…6.5
• CVE-2020-18651Buffer Overflow vulnerability in function ID3_Support::ID3v2…6.5
• CVE-2020-18652Buffer Overflow vulnerability in WEBP_Support.cpp in exempi …6.5