Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson2

Following the discovery of the remote code execution vulnerability in Fastjson2, Huawei has launched an immediate investigation. Attackers controlling JSON requests can exploit this vulnerability to execute arbitrary code on the target server. The investigation is completed. If you have deployed...

CVE-2020-1856

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful...

PT-2021-7549

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R005C00 through V500R005C20 Huawei NGFW Module version V500R005C00 Huawei NIP6600 versions V500R005C00 through V500R005C20 Huawei S12700 versions V200R010C00SPC600 through V200R020C10 Huawei S1700 versions...

PT-2021-14985

Name of the Vulnerable Software and Affected Versions: Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei Secospace USG6300 versions V500R001C30SPC200 through V500R005C00SPC200 Huawei Secospace...

PT-2021-3500

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NGFW Module versions V500R005C00SPC100 through V500R005C00SPC200 Huawei NIP6300 versions V500R005C00SPC100 through V500R005C10SPC200 Huawei NIP6600 versions...

PT-2021-3395

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R005C00 through V500R005C20 Huawei NGFW Module versions V500R005C00 through V500R005C20 Huawei SeMG9811 version V500R005C00 Huawei USG9500 versions V500R001C00 through V500R001C80, V500R005C00 through V500R005C20...

PT-2021-2657

Name of the Vulnerable Software and Affected Versions Huawei IPS Module affected versions not specified Huawei NGFW Module affected versions not specified Huawei Secospace USG6300 affected versions not specified Huawei Secospace USG6500 affected versions not specified Huawei Secospace USG6600...

PT-2021-14955

Name of the Vulnerable Software and Affected Versions: Huawei IPS Module affected versions not specified Huawei NGFW Module affected versions not specified Huawei NIP6600 affected versions not specified Huawei NIP6800 affected versions not specified Huawei Secospace USG6300 affected versions not...

PT-2021-12845

Name of the Vulnerable Software and Affected Versions: Huawei NGFW Module affected versions not specified Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified Huawei NIP6800 affected versions not specified Huawei Secospace USG6300 affected versions not...

CVE-2020-1856

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful...

CVE-2020-1856: Undefined Security Weakness

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful...

PT-2020-1839

Name of the Vulnerable Software and Affected Versions Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 Description The issue is related to an information leakage vulnerability. It can be exploited by sending...

PT-2019-17537

Name of the Vulnerable Software and Affected Versions Huawei AP2000 affected versions not specified Huawei IPS Module affected versions not specified Huawei NGFW Module affected versions not specified Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified...

PT-2019-17538

Name of the Vulnerable Software and Affected Versions Huawei AP2000 version affected versions not specified Huawei IPS Module version affected versions not specified Huawei NGFW Module version affected versions not specified Huawei NIP6300 version affected versions not specified Huawei NIP6600...

CVE-2018-7994: Missing Release of Resource after Effective Lifetime

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when...

PT-2018-18364

Name of the Vulnerable Software and Affected Versions: Huawei IPS Module versions V500R001C50 Huawei NGFW Module versions V500R001C50; V500R002C10 Huawei NIP6300 versions V500R001C50 Huawei NIP6600 versions V500R001C50 Huawei NIP6800 versions V500R001C50 Huawei Secospace USG6600 versions...

CVE-2017-17252: Out-of-bounds Read

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-17154

CVE-2017-17154 is a DoS in the IKEv2 implementation of Huawei products (including IPS/NGFW/NIP6300/6600, Secospace USG/USG6500/6600, etc.). The root cause is insufficient input validation leading to out-of-bounds-like conditions that can cause unauthorized memory access and system exceptions. Aff...

CVE-2017-17153: Improper Input Validation

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE,...

CVE-2017-17157: Improper Input Validation

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE,...