TI-2020-01795 Aliases CVE-2020-1864 GHSA-93h8-h74w-vwcw

Improper authentication in Secospace AntiDDoS8000

LOW 37CWE-287Published 2020-03-20 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

Why it matters now

EPSS 0.00806 57th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Secospace AntiDDoS8000	V500R001C00,V500R001C20,V500R001C60,V500R005C00	—	No fix listed	CNA

Secospace AntiDDoS8000 Vendor— Affected V500R001C00,V500R001C20,V500R001C60,V500R005C00 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c00:::::::*	v500r001c00	Vulnerable	Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c20:::::::*	v500r001c20	Vulnerable	Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c60:::::::*	v500r001c60	Vulnerable	Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r005c00:::::::*	v500r005c00	Vulnerable	Huawei
cpe:2.3:h:huawei:secospace_antiddos8000:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c00:*:*:*:*:*:*:* Versions v500r001c00 Vulnerable ·Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c20:*:*:*:*:*:*:* Versions v500r001c20 Vulnerable ·Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r001c60:*:*:*:*:*:*:* Versions v500r001c60 Vulnerable ·Huawei
cpe:2.3:o:huawei:secospace_antiddos8000_firmware:v500r005c00:*:*:*:*:*:*:* Versions v500r005c00 Vulnerable ·Huawei
cpe:2.3:h:huawei:secospace_antiddos8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-1864
2026-10-03 Alias added: GHSA-93h8-h74w-vwcw

References

Advisory 1

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en

TI-2016-03941 Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the… CVSS 3.0CRITICAL 9.8
TI-2019-03686 Out-of-bounds read in AP2000;IPS Module;NGFW… CVSS 3.1HIGH 8.6
TI-2019-03733 Buffer overflow in… CVSS 3.1HIGH 7.5
TI-2017-12608 Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to… CVSS 3.0MEDIUM 5.3
TI-2019-03690 Buffer overflow in AP2000;IPS Module;NGFW… CVSS 3.1MEDIUM 5.5
TI-2019-03689 Buffer overflow in AP2000;IPS Module;NGFW… CVSS 3.1MEDIUM 5.5

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences