Nip6800 Firmware Security Vulnerabilities and Issues — Nip6800 Firmware CVE List

Lucene search

HuaweiNip6800 Firmware

59 matches found

CVE•added 2019/12/13 11:15 p.m.•124 views

CVE-2019-5255

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a DoS vulnerability. An attacker may send crafted messages from a FTP clie...

5.5CVSS5.9AI score0.00057EPSS

CVE•added 2019/12/13 11:15 p.m.•115 views

CVE-2019-5256

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointe...

5.5CVSS5.9AI score0.00057EPSS

CVE•added 2019/12/13 11:15 p.m.•115 views

CVE-2019-5258

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may ...

5.5CVSS6.3AI score0.00073EPSS

CVE•added 2019/12/13 11:15 p.m.•112 views

CVE-2019-5257

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network.

5.5CVSS6.1AI score0.00057EPSS

CVE•added 2019/12/13 11:15 p.m.•111 views

CVE-2019-5254

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have an out-of-bounds read vulnerability. An attacker who logs in to the board ...

8.6CVSS8.3AI score0.00251EPSS

CVE•added 2020/02/28 7:15 p.m.•106 views

CVE-2020-1875

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process...

5.5CVSS5.5AI score0.00057EPSS

CVE•added 2020/02/28 7:15 p.m.•106 views

CVE-2020-1881

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of th...

7.5CVSS7.4AI score0.00218EPSS

CVE•added 2020/02/28 7:15 p.m.•104 views

CVE-2020-1860

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the acces...

7.5CVSS7.5AI score0.00108EPSS

CVE•added 2020/02/28 7:15 p.m.•101 views

CVE-2020-1876

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation...

7.5CVSS7.6AI score0.00184EPSS

CVE•added 2020/02/28 7:15 p.m.•100 views

CVE-2020-1873

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient va...

7.8CVSS7.4AI score0.0019EPSS

CVE•added 2020/02/28 7:15 p.m.•95 views

CVE-2020-1877

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certa...

4.9CVSS4.7AI score0.00064EPSS

CVE•added 2020/02/18 12:15 a.m.•94 views

CVE-2020-1815

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while pars...

7.5CVSS7.4AI score0.00251EPSS

CVE•added 2020/02/28 7:15 p.m.•94 views

CVE-2020-1874

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certai...

5.5CVSS5.4AI score0.00059EPSS

CVE•added 2020/02/18 2:15 a.m.•93 views

CVE-2020-1814

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability. An authenticated attacker may do some special operations in the...

5.3CVSS5.1AI score0.00186EPSS

CVE•added 2020/02/18 12:15 a.m.•78 views

CVE-2020-1816

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attacke...

7.5CVSS7.5AI score0.00397EPSS

CVE•added 2020/02/18 12:15 a.m.•78 views

CVE-2020-1830

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This caus...

5.3CVSS5.3AI score0.00244EPSS

CVE•added 2024/12/27 10:15 a.m.•73 views

CVE-2020-1818

There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilitie...

5.3CVSS4.6AI score0.00044EPSS

CVE•added 2021/03/22 7:15 p.m.•73 views

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Modul...

7.5CVSS7.3AI score0.00182EPSS

CVE•added 2020/02/17 8:15 p.m.•68 views

CVE-2020-1828

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message....

7.5CVSS7.4AI score0.00251EPSS

CVE•added 2021/04/08 7:15 p.m.•68 views

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product i...

6.5CVSS6.4AI score0.00186EPSS

CVE•added 2020/02/17 9:15 p.m.•66 views

CVE-2020-1829

Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory....

7.5CVSS7.4AI score0.00251EPSS

CVE•added 2020/06/05 3:15 p.m.•64 views

CVE-2020-1883

Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by continuously performing specific operations. Successful exploitation of this vulnerability can cause service abnormal.

4.9CVSS5AI score0.00157EPSS

CVE•added 2020/07/08 5:15 p.m.•61 views

CVE-2019-19416

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the ...

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2020/02/17 9:15 p.m.•58 views

CVE-2020-1827

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending s...

7.5CVSS7.3AI score0.00251EPSS

CVE•added 2020/12/24 4:15 p.m.•56 views

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.

6.5CVSS6.5AI score0.00047EPSS

CVE•added 2021/03/22 8:15 p.m.•56 views

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include s...

5.3CVSS5.3AI score0.00207EPSS

CVE•added 2018/04/24 3:29 p.m.•54 views

CVE-2017-17258

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V2...

7.5CVSS7.4AI score0.00147EPSS

CVE•added 2018/04/24 3:29 p.m.•53 views

CVE-2017-17257

7.5CVSS7.4AI score0.00265EPSS

CVE•added 2020/02/17 8:15 p.m.•53 views

CVE-2020-1857

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authen...

5.5CVSS5.2AI score0.0006EPSS

CVE•added 2018/04/24 3:29 p.m.•52 views

CVE-2017-17254

7.5CVSS7.4AI score0.00148EPSS

CVE•added 2018/04/24 3:29 p.m.•52 views

CVE-2017-17256

7.5CVSS7.4AI score0.00265EPSS

CVE•added 2021/01/13 11:15 p.m.•52 views

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C...

6.5CVSS6.5AI score0.00041EPSS

CVE•added 2018/02/15 4:29 p.m.•51 views

CVE-2017-15331

5.3CVSS5.2AI score0.00336EPSS

CVE•added 2020/06/08 2:15 p.m.•51 views

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R0...

9.8CVSS9.5AI score0.00161EPSS

CVE•added 2018/04/24 3:29 p.m.•50 views

CVE-2017-17252

5.3CVSS5.9AI score0.00153EPSS

CVE•added 2018/02/15 4:29 p.m.•50 views

CVE-2017-17296

5.3CVSS5.3AI score0.00229EPSS

CVE•added 2020/07/08 5:15 p.m.•50 views

CVE-2019-19417

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2020/02/17 8:15 p.m.•50 views

CVE-2020-1858

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. At...

7.5CVSS7.3AI score0.00218EPSS

CVE•added 2024/12/28 7:15 a.m.•49 views

CVE-2020-1820

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/02/15 4:29 p.m.•48 views

CVE-2017-17297

5.3CVSS5.6AI score0.00162EPSS

CVE•added 2018/02/15 4:29 p.m.•47 views

CVE-2017-15350

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V50...

5.3CVSS5.6AI score0.00162EPSS

CVE•added 2018/04/24 3:29 p.m.•47 views

CVE-2017-17251

5.3CVSS5.9AI score0.00154EPSS

CVE•added 2020/07/08 5:15 p.m.•47 views

CVE-2019-19415

7.5CVSS7.7AI score0.00358EPSS

CVE•added 2024/12/27 10:15 a.m.•47 views

CVE-2020-1819

5.3CVSS4.6AI score0.00044EPSS

CVE•added 2018/02/15 4:29 p.m.•46 views

CVE-2017-15339

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V50...

4.3CVSS4.7AI score0.0019EPSS

CVE•added 2018/04/24 3:29 p.m.•46 views

CVE-2017-17253

7.5CVSS7.4AI score0.00147EPSS

CVE•added 2024/12/28 7:15 a.m.•46 views

CVE-2020-1822

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2024/12/28 7:15 a.m.•46 views

CVE-2020-1824

5.3CVSS4.5AI score0.00044EPSS

CVE•added 2018/04/24 3:29 p.m.•45 views

CVE-2017-17255