Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-1873
HistoryFeb 28, 2020 - 7:15 p.m.

CVE-2020-1873

2020-02-2819:15:11
CWE-125
[email protected]
web.nvd.nist.gov
2

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.5%

JSON

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot.

Affected configurations

Nvd
Node
huaweinip6800_firmwareMatchv500r001c30
OR
huaweinip6800_firmwareMatchv500r001c60spc500
OR
huaweinip6800_firmwareMatchv500r005c00spc100
AND
huaweinip6800Match-
Node
huaweisecospace_usg6600_firmwareMatchv500r001c30spc200
OR
huaweisecospace_usg6600_firmwareMatchv500r001c30spc600
OR
huaweisecospace_usg6600_firmwareMatchv500r001c60spc500
OR
huaweisecospace_usg6600_firmwareMatchv500r005c00spc100
AND
huaweisecospace_usg6600Match-
Node
huaweiusg9500_firmwareMatchv500r001c30spc200
OR
huaweiusg9500_firmwareMatchv500r001c30spc600
OR
huaweiusg9500_firmwareMatchv500r001c60spc500
OR
huaweiusg9500_firmwareMatchv500r005c00spc100
AND
huaweiusg9500Match-
VendorProductVersionCPE
huaweinip6800_firmwarev500r001c30cpe:2.3:o:huawei:nip6800_firmware:v500r001c30:*:*:*:*:*:*:*
huaweinip6800_firmwarev500r001c60spc500cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*
huaweinip6800_firmwarev500r005c00spc100cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*
huaweinip6800-cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c30spc200cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c30spc600cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r001c60spc500cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*
huaweisecospace_usg6600_firmwarev500r005c00spc100cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*
huaweisecospace_usg6600-cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*
huaweiusg9500_firmwarev500r001c30spc200cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

prion 1
huawei 1
cvelist 1
cve 1
prion
prion
Out-of-bounds
2020-02-28 19:15:00
huawei
huawei
Security Advisory - Out-of-bounds Read Vulnerability in Some Huawei Products
2020-02-19 00:00:00
cvelist
cvelist
CVE-2020-1873
2020-02-28 18:14:50
cve
cve
CVE-2020-1873
2020-02-28 19:15:11

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

44.5%

JSON
Related for NVD:CVE-2020-1873
prion1huawei1cvelist1cve1