337 matches found
CVE-2020-1874
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause...
CVE-2020-1875
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain proce...
Improper access control
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause...
Improper access control
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain proce...
Out-of-bounds
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validati...
Improper access control
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the...
Design/Logic Flaw
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of...
Out-of-bounds
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient...
CVE-2020-1877
CVE-2020-1877 involves Huawei NIP6800, Secospace USG6600 and USG9500 devices. Affected versions include V500R001C30; V500R001C60SPC500; V500R005C00SPC100. The root cause is an invalid pointer access when an administrator logs in and performs operations, which can cause certain processes to reboot...
CVE-2020-1876
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validati...
CVE-2020-1876
CVE-2020-1876 affects Huawei NIP6800, Secospace USG6600 and USG9500 with specific V500R001C30, V500R001C60SPC500 and V500R005C00SPC100 builds. It is an out-of-bounds write vulnerability triggered by unauthenticated, malformed packets that bypass validation and may reboot the targeted device. Root...
CVE-2020-1881
CVE-2020-1881 affects Huawei NIP6800, Secospace USG6600 and USG9500 devices. A resource management error in a function can be triggered by specific operations, leading to service abnormality. Affected versions include V500R001C30, V500R001C60SPC500 and V500R005C00SPC100. Remediation references Hu...
CVE-2020-1860
The CVE-2020-1860 entry concerns Huawei Secospace/NIP6800 family devices (NIP6800; Secospace USG6600; USG9500) with firmware lines V500R001C30, V500R001C60SPC500, and V500R005C00SPC100, where an access control bypass vulnerability exists. The root cause allows attackers who can reach the internal...
CVE-2020-1874
The CVE-2020-1874 entry concerns Huawei NIP6800, Secospace USG6600, and USG9500 devices. Affected versions include V500R001C30; V500R001C60SPC500; V500R005C00SPC100. Description across sources states an invalid pointer access vulnerability that is triggered when an operator logs in and performs o...
CVE-2020-1874
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause...
CVE-2020-1873
Affected Huawei NIP6800, Secospace USG6600 and USG9500 devices (NIP6800; Secospace USG6600; USG9500) running V500R001C30; V500R001C60SPC500; V500R005C00SPC100 expose an out-of-bounds read due to insufficient validation of a crafted message, allowing an unauthenticated remote attacker to cause a d...
CVE-2020-1873
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient...
CVE-2020-1875
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain proce...
CVE-2020-1875
The CVE-2020-1875 entry concerns Huawei NIP6800, Secospace USG6600, and USG9500 devices with invalid pointer access in certain operations, leading to a reboot of a process. Affected: NIP6800 (V500R001C30, V500R001C60SPC500), Secospace USG6600 (V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC5...
Huawei NIP6800, Secospace USG6600 and USG9500 Access Control Bypass Vulnerability
Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An access control bypass vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...