7.5

CVE-2020-1876

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Nip6800 Firmware Version v500r001c30
   Huawei ≫ Nip6800 Version -
Huawei ≫ Nip6800 Firmware Version v500r001c60spc500
   Huawei ≫ Nip6800 Version -
Huawei ≫ Nip6800 Firmware Version v500r005c00
   Huawei ≫ Nip6800 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30spc600
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c60spc500
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r005c00
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30spc200
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c30spc600
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r001c60spc500
   Huawei ≫ Usg9500 Version -
Huawei ≫ Usg9500 Firmware Version v500r005c00
   Huawei ≫ Usg9500 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.503
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en
Vendor Advisory