Improper access control

2020-02-2819:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.

CPENameOperatorVersion
nip6800_firmwareeq500r1c30-v
nip6800_firmwareeq500r1c60spc500-v
nip6800_firmwareeq500r5c0spc100-v
secospace_usg6600_firmwareeq500r1c30spc200-v
secospace_usg6600_firmwareeq500r1c30spc600-v
secospace_usg6600_firmwareeq500r1c60spc500-v
secospace_usg6600_firmwareeq500r5c0spc100-v
usg9500_firmwareeq500r1c30spc200-v
usg9500_firmwareeq500r1c30spc600-v
usg9500_firmwareeq500r1c60spc500-v

Name	Operator	Version
nip6800_firmware	eq	500r1c30-v
nip6800_firmware	eq	500r1c60spc500-v
nip6800_firmware	eq	500r5c0spc100-v
secospace_usg6600_firmware	eq	500r1c30spc200-v
secospace_usg6600_firmware	eq	500r1c30spc600-v
secospace_usg6600_firmware	eq	500r1c60spc500-v
secospace_usg6600_firmware	eq	500r5c0spc100-v
usg9500_firmware	eq	500r1c30spc200-v
usg9500_firmware	eq	500r1c30spc600-v
usg9500_firmware	eq	500r1c60spc500-v