5.5

CVE-2020-1875

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500.

Data is provided by the National Vulnerability Database (NVD)
HuaweiNip6800 Firmware Versionv500r001c30
   HuaweiNip6800 Version-
HuaweiNip6800 Firmware Versionv500r001c60spc500
   HuaweiNip6800 Version-
HuaweiSecospace Usg6600 Firmware Versionv500r001c30spc200
   HuaweiSecospace Usg6600 Version-
HuaweiSecospace Usg6600 Firmware Versionv500r001c30spc600
   HuaweiSecospace Usg6600 Version-
HuaweiSecospace Usg6600 Firmware Versionv500r001c60spc500
   HuaweiSecospace Usg6600 Version-
HuaweiUsg9500 Firmware Versionv500r001c30spc200
   HuaweiUsg9500 Version-
HuaweiUsg9500 Firmware Versionv500r001c30spc600
   HuaweiUsg9500 Version-
HuaweiUsg9500 Firmware Versionv500r001c60spc500
   HuaweiUsg9500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.177
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.