Lucene search

K

Secospace USG6600, Secospace USG6600, Secospace USG6600, USG9500, USG9500, USG9500 Security Vulnerabilities

nvd
nvd

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.3CVSS

0.001EPSS

2021-03-22 08:15 PM
1
prion
prion

Design/Logic Flaw

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.3CVSS

5.3AI Score

0.001EPSS

2021-03-22 08:15 PM
7
cve
cve

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.4CVSS

4.5AI Score

0.0004EPSS

2021-03-22 07:15 PM
24
nvd
nvd

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.4CVSS

0.0004EPSS

2021-03-22 07:15 PM
cve
cve

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS

7.3AI Score

0.001EPSS

2021-03-22 07:15 PM
45
nvd
nvd

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS

0.001EPSS

2021-03-22 07:15 PM
1
prion
prion

Information disclosure

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.4CVSS

4.5AI Score

0.0004EPSS

2021-03-22 07:15 PM
prion
prion

Denial of service

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS

7.3AI Score

0.001EPSS

2021-03-22 07:15 PM
6
cvelist
cvelist

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.6AI Score

0.001EPSS

2021-03-22 07:03 PM
cvelist
cvelist

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.6AI Score

0.001EPSS

2021-03-22 06:41 PM
1
cvelist
cvelist

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.8AI Score

0.0004EPSS

2021-03-22 06:38 PM
nvd
nvd

CVE-2020-9212

There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information...

6.5CVSS

0.001EPSS

2021-03-22 06:15 PM
cve
cve

CVE-2021-22309

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions...

7.5CVSS

7.2AI Score

0.002EPSS

2021-03-22 06:15 PM
35
cve
cve

CVE-2020-9212

There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information...

6.5CVSS

6.2AI Score

0.001EPSS

2021-03-22 06:15 PM
15
2
cve
cve

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.4AI Score

0.001EPSS

2021-03-22 06:15 PM
19
2
nvd
nvd

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

0.001EPSS

2021-03-22 06:15 PM
prion
prion

Design/Logic Flaw

There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information...

6.5CVSS

6.3AI Score

0.001EPSS

2021-03-22 06:15 PM
3
prion
prion

Denial of service

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.4AI Score

0.001EPSS

2021-03-22 06:15 PM
4
cvelist
cvelist

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5AI Score

0.001EPSS

2021-03-22 05:39 PM
cvelist
cvelist

CVE-2020-9212

There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information...

6.3AI Score

0.001EPSS

2021-03-22 05:31 PM
huawei
huawei

Security Advisory - Use After Free Vulnerability in Huawei Product

There is a use-after-free vulnerability in Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. (Vulnerability ID:...

5.3CVSS

5.4AI Score

0.001EPSS

2021-02-10 12:00 AM
17
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Huawei Product

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to affected module. This can lead to denial of service. (Vulnerability ID: HWPSIRT-2020-65315) This...

7.5CVSS

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
14
huawei
huawei

Security Advisory - Memory Leak Vulnerability in Some Huawei Products

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. (Vulnerability...

6.5CVSS

6.1AI Score

0.001EPSS

2021-02-10 12:00 AM
38
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Some Products

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services abnormal. (Vulnerability ID: HWPSIRT-2020-32540) This vulnerability has...

7.5CVSS

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
33
huawei
huawei

Security Advisory - Information Leakage Vulnerability in Some Huawei Products

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak. (Vulnerability ID:...

4.4CVSS

4.8AI Score

0.0004EPSS

2021-02-03 12:00 AM
23
huawei
huawei

Security Advisory - Improper Information Processing Vulnerability in Huawei Products

There is a vulnerability that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to performs some operation can get information and cause information leak. (Vulnerability ID: HWPSIRT-2020-36604) This vulnerability has been...

6.5CVSS

6AI Score

0.001EPSS

2021-02-03 12:00 AM
35
huawei
huawei

Security Advisory - Information Leakage Vulnerability in Huawei Products

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. (Vulnerability ID: HWPSIRT-2020-74955) This vulnerability...

7.5CVSS

6.8AI Score

0.002EPSS

2021-02-02 12:00 AM
13
openvas

6.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
openvas

6.7CVSS

7.7AI Score

0.0004EPSS

2021-01-19 12:00 AM
4
openvas
openvas

Huawei Data Communication: Out of Bounds Read Vulnerability in Several Products

There is an out-of-bounds read vulnerability in several...

6.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
openvas

7.5CVSS

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
cve
cve

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.5AI Score

0.001EPSS

2021-01-13 11:15 PM
23
nvd
nvd

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.5AI Score

0.001EPSS

2021-01-13 11:15 PM
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.4AI Score

0.001EPSS

2021-01-13 11:15 PM
5
cvelist
cvelist

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5AI Score

0.001EPSS

2021-01-13 10:22 PM
1
nvd
nvd

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.5AI Score

0.001EPSS

2020-12-24 04:15 PM
cve
cve

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.5AI Score

0.001EPSS

2020-12-24 04:15 PM
42
2
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.4AI Score

0.001EPSS

2020-12-24 04:15 PM
2
cvelist
cvelist

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5AI Score

0.001EPSS

2020-12-24 03:44 PM
nvd
nvd

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.7AI Score

0.0004EPSS

2020-11-13 03:15 PM
cve
cve

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.6AI Score

0.0004EPSS

2020-11-13 03:15 PM
25
cve
cve

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.3AI Score

0.001EPSS

2020-11-13 03:15 PM
29
nvd
nvd

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.3AI Score

0.001EPSS

2020-11-13 03:15 PM
prion
prion

Command injection

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7CVSS

6.7AI Score

0.0004EPSS

2020-11-13 03:15 PM
1
prion
prion

Denial of service

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.5CVSS

7.2AI Score

0.001EPSS

2020-11-13 03:15 PM
3
cvelist
cvelist

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

7.4AI Score

0.001EPSS

2020-11-13 02:50 PM
cvelist
cvelist

CVE-2020-9127

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...

6.7AI Score

0.0004EPSS

2020-11-13 02:46 PM
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Some Huawei Products

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attacker can construct attack scenarios, which lead to denial of service. (Vulnerability ID: HWPSIRT-2020-79490) This vulnerability...

7.5CVSS

6.8AI Score

0.001EPSS

2020-11-11 12:00 AM
11
huawei
huawei

Security Advisory - Command Injection Vulnerability in Some Huawei Products

Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection. (Vulnerability ID: HWPSIRT-2020-59877) This...

6.7CVSS

7AI Score

0.0004EPSS

2020-11-11 12:00 AM
29
openvas

6.5CVSS

7.1AI Score

0.001EPSS

2020-07-24 12:00 AM
4
Total number of security vulnerabilities556