Ngfw Module Firmware Security Vulnerabilities and Issues — Ngfw Module Firmware CVE List

Lucene search

HuaweiNgfw Module Firmware

57 matches found

CVE•added 2020/02/17 9:15 p.m.•88 views

CVE-2020-1856

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploi...

7.5CVSS7.3AI score0.00187EPSS

CVE•added 2024/12/27 10:15 a.m.•73 views

CVE-2020-1818

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilitie...

5.3CVSS4.6AI score0.00044EPSS

CVE•added 2021/03/22 7:15 p.m.•73 views

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Modul...

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2021/04/08 7:15 p.m.•68 views

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product i...

6.5CVSS6.4AI score0.00186EPSS

CVE•added 2021/06/22 7:15 p.m.•64 views

CVE-2021-22342

There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit this vulnerability by performing some operations. This can lead to information leak. Affected product versions include: IPS Module versions V5...

4.9CVSS4.9AI score0.00138EPSS

CVE•added 2020/07/08 5:15 p.m.•61 views

CVE-2019-19416

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the ...

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2018/03/05 7:29 p.m.•60 views

CVE-2017-17137

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R0...

5.5CVSS5.2AI score0.00017EPSS

CVE•added 2018/04/24 3:29 p.m.•54 views

CVE-2017-17258

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V2...

7.5CVSS7.4AI score0.00147EPSS

CVE•added 2018/04/24 3:29 p.m.•53 views

CVE-2017-17257

7.5CVSS7.4AI score0.00265EPSS

CVE•added 2020/01/03 3:15 p.m.•53 views

CVE-2019-5304

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

7.8CVSS7.5AI score0.0024EPSS

CVE•added 2018/04/24 3:29 p.m.•52 views

CVE-2017-17254

7.5CVSS7.4AI score0.00148EPSS

CVE•added 2018/04/24 3:29 p.m.•52 views

CVE-2017-17256

7.5CVSS7.4AI score0.00265EPSS

CVE•added 2018/02/15 4:29 p.m.•51 views

CVE-2017-15331

5.3CVSS5.2AI score0.00336EPSS

CVE•added 2020/06/08 2:15 p.m.•51 views

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R0...

9.8CVSS9.5AI score0.00161EPSS

CVE•added 2018/04/24 3:29 p.m.•50 views

CVE-2017-17252

5.3CVSS5.9AI score0.00153EPSS

CVE•added 2018/02/15 4:29 p.m.•50 views

CVE-2017-17296

5.3CVSS5.3AI score0.00229EPSS

CVE•added 2018/03/09 5:29 p.m.•50 views

CVE-2017-17330

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML ...

3.3CVSS4AI score0.00026EPSS

CVE•added 2020/07/08 5:15 p.m.•50 views

CVE-2019-19417

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2021/10/27 1:15 a.m.•50 views

CVE-2021-37129

There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could cause out of bounds write leading to a denial of service condition.Affected product versions include:I...

7.5CVSS7.4AI score0.00182EPSS

CVE•added 2024/12/28 7:15 a.m.•49 views

CVE-2020-1820

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/03/05 7:29 p.m.•48 views

CVE-2017-17135

5.5CVSS5.2AI score0.00021EPSS

CVE•added 2018/02/15 4:29 p.m.•48 views

CVE-2017-17297

5.3CVSS5.6AI score0.00162EPSS

CVE•added 2018/02/15 4:29 p.m.•47 views

CVE-2017-15350

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V50...

5.3CVSS5.6AI score0.00162EPSS

CVE•added 2018/04/24 3:29 p.m.•47 views

CVE-2017-17251

5.3CVSS5.9AI score0.00154EPSS

CVE•added 2020/07/08 5:15 p.m.•47 views

CVE-2019-19415

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2024/12/27 10:15 a.m.•47 views

CVE-2020-1819

5.3CVSS4.6AI score0.00044EPSS

CVE•added 2021/06/29 8:15 p.m.•47 views

CVE-2021-22341

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module V500R005C00SPC100,V500R0...

4.9CVSS4.9AI score0.00157EPSS

CVE•added 2016/05/23 7:59 p.m.•46 views

CVE-2016-4577

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimat...

7.5CVSS8AI score0.00125EPSS

CVE•added 2018/02/15 4:29 p.m.•46 views

CVE-2017-15339

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V50...

4.3CVSS4.7AI score0.0019EPSS

CVE•added 2018/02/15 4:29 p.m.•46 views

CVE-2017-17154

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, N...

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2018/04/24 3:29 p.m.•46 views

CVE-2017-17253

7.5CVSS7.4AI score0.00147EPSS

CVE•added 2024/12/28 7:15 a.m.•46 views

CVE-2020-1822

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2024/12/28 7:15 a.m.•46 views

CVE-2020-1824

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/04/24 3:29 p.m.•45 views

CVE-2017-17255

7.5CVSS7.4AI score0.00148EPSS

CVE•added 2018/02/15 4:29 p.m.•44 views

CVE-2017-15332

5.3CVSS5.3AI score0.00336EPSS

CVE•added 2021/11/23 4:15 p.m.•44 views

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions include...

5.9CVSS5.5AI score0.0007EPSS

CVE•added 2018/02/15 4:29 p.m.•43 views

CVE-2017-15335

The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001...

5.3CVSS5.4AI score0.0019EPSS

CVE•added 2018/02/15 4:29 p.m.•43 views

CVE-2017-15336

5.3CVSS5.4AI score0.0019EPSS

CVE•added 2024/12/28 7:15 a.m.•43 views

CVE-2020-1823

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/02/15 4:29 p.m.•42 views

CVE-2017-15348

Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulnerability. An unauthenticated, remote attacker...

7.8CVSS7.5AI score0.0015EPSS

CVE•added 2018/03/05 7:29 p.m.•42 views

CVE-2017-17138

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10; ...

5.5CVSS5.2AI score0.00012EPSS

CVE•added 2018/02/15 4:29 p.m.•42 views

CVE-2017-17157

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2024/12/28 7:15 a.m.•42 views

CVE-2020-1821

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/02/15 4:29 p.m.•41 views

CVE-2017-15338

4.3CVSS4.7AI score0.0019EPSS

CVE•added 2018/03/05 7:29 p.m.•41 views

CVE-2017-17136

5.5CVSS5.4AI score0.00016EPSS

CVE•added 2018/02/15 4:29 p.m.•41 views

CVE-2017-17153

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2018/02/15 4:29 p.m.•41 views

CVE-2017-17155

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2018/02/15 4:29 p.m.•40 views

CVE-2017-15337

4.3CVSS4.7AI score0.0019EPSS

CVE•added 2018/02/15 4:29 p.m.•40 views

CVE-2017-17295

5.3CVSS5.6AI score0.00162EPSS

CVE•added 2018/07/31 2:29 p.m.•40 views

CVE-2018-7994

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when process...

7.8CVSS7.4AI score0.00281EPSS

Total number of security vulnerabilities57