Skip to main content

Manageone CVE-2020-1862

LOW
Double Free (CWE-415)
2020-03-20 psirt@huawei.com
Information Disclosure Huawei Manageone Campusinsight
3.3
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.3 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
Mar 20, 2020 - 15:15 nvd
LOW 3.3

DescriptionNVD

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050.

AnalysisAI

There is a double free vulnerability in some Huawei products. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-415. There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050. Affected products include: Huawei Campusinsight, Huawei Manageone.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Manageone

View all
CVE-2019-14835 HIGH POC
7.8 Sep 17

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that t
CVE-2021-22314 HIGH
7.8 Mar 22

There is a local privilege escalation vulnerability in some versions of ManageOne. Rated high severity (CVSS 7.8), this

CVE-2021-22299 HIGH
7.8 Feb 06

There is a local privilege escalation vulnerability in some Huawei products. Rated high severity (CVSS 7.8), this vulner
CVE-2021-22293 HIGH
7.5 Feb 06

Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Rated high severity (CVSS 7.5),
CVE-2019-5289 HIGH
7.5 Nov 13

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insuffici
CVE-2021-22311 HIGH
7.2 Mar 22

There is an improper permission assignment vulnerability in Huawei ManageOne product. Rated high severity (CVSS 7.2), th
CVE-2020-9115 HIGH
7.2 Dec 01

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command
CVE-2021-37131 MEDIUM
6.8 Oct 27

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. Rated medium severity (CV
CVE-2021-22397 MEDIUM
6.7 Aug 02

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. Rated medium severity (CVSS 6.7), this vulnerab
CVE-2021-22339 MEDIUM
6.5 May 20

There is a denial of service vulnerability in some versions of ManageOne. Rated medium severity (CVSS 6.5), this vulnera
CVE-2021-22298 MEDIUM
6.5 Feb 06

There is a logic vulnerability in Huawei Gauss100 OLTP Product. Rated medium severity (CVSS 6.5), this vulnerability is

CVE-2021-22409 MEDIUM
5.3 May 20

There is a denial of service vulnerability in some versions of ManageOne. Rated medium severity (CVSS 5.3), this vulnera

Same weakness CWE-415 – Double Free

View all
CVE-2014-0502 HIGH POC
8.8
CVE-2018-0101 CRITICAL POC
10.0
CVE-2023-25136 MEDIUM POC
6.5
CVE-2026-33824 CRITICAL POC
9.8
CVE-2014-1767 HIGH POC
7.2
CVE-2016-5768 CRITICAL POC
9.8
CVE-2016-5772 CRITICAL POC
9.8
CVE-2016-3132 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2020-1862 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy