7.8
CVE-2020-1873
- EPSS 0.77%
- Veröffentlicht 28.02.2020 19:15:11
- Zuletzt bearbeitet 21.11.2024 05:11:31
- Erkennungen
LoginNIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Nip6800 Firmware Version v500r001c30
Huawei ≫ Nip6800 Firmware Version v500r001c60spc500
Huawei ≫ Nip6800 Firmware Version v500r005c00spc100
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc200
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc600
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c60spc500
Huawei ≫ Secospace Usg6600 Firmware Version v500r005c00spc100
Huawei ≫ Usg9500 Firmware Version v500r001c30spc200
Huawei ≫ Usg9500 Firmware Version v500r001c30spc600
Huawei ≫ Usg9500 Firmware Version v500r001c60spc500
Huawei ≫ Usg9500 Firmware Version v500r005c00spc100
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.77% | 0.507 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofboundread-en