Authentication flaw

2020-06-0814:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

CPENameOperatorVersion
ips_module_firmwareeq500r1c0-v
ips_module_firmwareeq500r1c20-v
ips_module_firmwareeq500r1c30-v
ips_module_firmwareeq500r1c50-v
ips_module_firmwareeq500r1c60-v
ips_module_firmwareeq500r1c80-v
ips_module_firmwareeq500r5c0-v
ips_module_firmwareeq500r5c10-v
ips_module_firmwareeq500r5c20-v
ngfw_module_firmwareeq500r1c0-v

Name	Operator	Version
ips_module_firmware	eq	500r1c0-v
ips_module_firmware	eq	500r1c20-v
ips_module_firmware	eq	500r1c30-v
ips_module_firmware	eq	500r1c50-v
ips_module_firmware	eq	500r1c60-v
ips_module_firmware	eq	500r1c80-v
ips_module_firmware	eq	500r5c0-v
ips_module_firmware	eq	500r5c10-v
ips_module_firmware	eq	500r5c20-v
ngfw_module_firmware	eq	500r1c0-v