high7.5
CVE-2020-1858
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V5…
Impact
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Nip6800 Firmware | Versions v500r001c30, v500r001c60spc500, v500r005c00spc100 |
| Huawei | Secospace Usg6600 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100 |
| Huawei | Usg9500 Firmware | Versions v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100 |
References
- NVD record
- CVE.org record
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en