Information disclosure

2021-06-2219:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V500R005C00, V500R005C10, V500R005C20; NGFW Module versions V500R005C00,V500R005C10, V500R005C20; SeMG9811 versions V500R005C00; USG9500 versions V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10, V500R005C20.

CPENameOperatorVersion
ips_module_firmwareeq500r5c0-v
ips_module_firmwareeq500r5c10-v
ips_module_firmwareeq500r5c20-v
ngfw_module_firmwareeq500r5c0-v
ngfw_module_firmwareeq500r5c10-v
ngfw_module_firmwareeq500r5c20-v
semg9811_firmwareeq500r5c0-v
usg9500_firmwareeq500r1c0-v
usg9500_firmwareeq500r1c20-v
usg9500_firmwareeq500r1c30-v

Name	Operator	Version
ips_module_firmware	eq	500r5c0-v
ips_module_firmware	eq	500r5c10-v
ips_module_firmware	eq	500r5c20-v
ngfw_module_firmware	eq	500r5c0-v
ngfw_module_firmware	eq	500r5c10-v
ngfw_module_firmware	eq	500r5c20-v
semg9811_firmware	eq	500r5c0-v
usg9500_firmware	eq	500r1c0-v
usg9500_firmware	eq	500r1c20-v
usg9500_firmware	eq	500r1c30-v