Input validation

2020-02-1720:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

42.6%

JSON

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.

CPENameOperatorVersion
nip6800_firmwareeq500r1c30-v
nip6800_firmwareeq500r1c60spc500-v
nip6800_firmwareeq500r5c0-v
secospace_usg6600_firmwareeq500r1c30spc200-v
secospace_usg6600_firmwareeq500r1c30spc600-v
secospace_usg6600_firmwareeq500r1c60spc500-v
secospace_usg6600_firmwareeq500r5c0-v
usg9500_firmwareeq500r1c30spc200-v
usg9500_firmwareeq500r1c30spc600-v
usg9500_firmwareeq500r1c60spc500-v

Name	Operator	Version
nip6800_firmware	eq	500r1c30-v
nip6800_firmware	eq	500r1c60spc500-v
nip6800_firmware	eq	500r5c0-v
secospace_usg6600_firmware	eq	500r1c30spc200-v
secospace_usg6600_firmware	eq	500r1c30spc600-v
secospace_usg6600_firmware	eq	500r1c60spc500-v
secospace_usg6600_firmware	eq	500r5c0-v
usg9500_firmware	eq	500r1c30spc200-v
usg9500_firmware	eq	500r1c30spc600-v
usg9500_firmware	eq	500r1c60spc500-v

Rows per page:

1-10 of 111

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-01-ipsec-en

0.001 Low

EPSS

Percentile

42.6%

JSON

Related for PRION:CVE-2020-1828