Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20200408-01-SWAPGS
HistoryApr 08, 2020 - 12:00 a.m.

Security Advisory - Information Disclosure Vulnerability about SWAPGS Instruction

2020-04-0800:00:00
Huawei Technologies
www.huawei.com
85

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

35.4%

An information disclosure vulnerability exists when certain x86-64-bit central processing units (CPU) speculatively access memory, this vulnerability uses the SWAPGS instruction in the CPU. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. An attacker who successfully exploited the vulnerability could obtain specific information. (Vulnerability ID: HWPSIRT-2019-08103)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-1125.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en

Affected configurations

Vulners
Node
huaweimanageoneMatch6.5.0
OR
huaweimanageoneMatch6.5.0.spc100.b210
OR
huaweimanageoneMatch6.5.1rc1.b060
OR
huaweimanageoneMatch6.5.1rc1.b080
OR
huaweimanageoneMatch6.5.rc2.b050
OR
huaweioceanstor_ismMatchv300r006c00spc001
OR
huaweioceanstor_ismMatchv300r006c10
OR
huaweiimanager_netecoMatchv600r009c00
OR
huaweiimanager_netecoMatchv600r009c10spc200
OR
huaweiimanager_neteco_6000Matchv600r008c10spc300
OR
huaweiimanager_neteco_6000Matchv600r008c20

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

35.4%