CVE-2020-1837

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-06 · updated 2026-06-17

Description

ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.

Affected products

ChangXiang 8 Plus: before 9.1.0.136\(c00e121r1p6t8\) — fixed in 9.1.0.136\(c00e121r1p6t8\)

How to fix

Upgrade to a fixed version: ChangXiang 8 Plus 9.1.0.136\(c00e121r1p6t8\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-dos-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-dos-en

Get alerted when CVE-2020-1837 or the next vulnerability affects your stack