CVE-2020-1870

Name: CVE-2020-1870
Creator: NVD / NIST
Published: 2020-05-29T20:15:11.357+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 0.74%

Last modified Jun 17, 2026

CVE-2020-1870 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. EPSS estimates a 0.74% chance of exploitation in the next 30 days.

Description

There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability

0.74%

50.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-772

Affected Software

Vendor	Product	Versions
Huawei	Cloudengine 12800 Firmware	v200r019c00
Huawei	Cloudengine 12800 Firmware	v200r019c00spc600
Huawei	Cloudengine 12800 Firmware	v200r019c00spc800
Huawei	Cloudengine 12800 Firmware	v200r019c10
Huawei	Cloudengine 6800 Firmware	v200r019c00spc800

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-enVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-enVendor Advisory

Timeline

Published: May 29, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-1870?

How severe is CVE-2020-1870?

CVE-2020-1870 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.74% probability of exploitation in the next 30 days.

How do I fix CVE-2020-1870?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-1870?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST