What’s Vulnerable › Vulnerabilities

CVE-2020-1799

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-21 · updated 2026-06-17
• Weakness: CWE-416

Description

E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.

Affected products

• E6878-370: 10.0.3.1(h557sp27c233), 10.0.3.1(h563sp1c00), 10.0.3.1(h563sp1c233)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en

Get alerted when CVE-2020-1799 or the next vulnerability affects your stack