CVE-2020-1830 - Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message

Back Back to CVE browser

MEDIUM

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message

Published Feb 17, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 0.73%

Description

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This causes 1 byte out-of-bound read, compromising normal service.

Affected products

Vendor Huawei Product Secospace USG6600, USG9500 Default
unknown
Affected
- V500R001C30SPC200
- V500R001C30SPC600
- V500R001C60SPC500
- V500R005C00
Vendor Huawei Product n/a Default
unknown
Affected
- V500R001C30
- V500R001C60SPC500
- V500R005C00

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Huawei	Secospace USG6600, USG9500	unknown	Affected V500R001C30SPC200 V500R001C30SPC600 V500R001C60SPC500 V500R005C00
Huawei	n/a	unknown	Affected V500R001C30 V500R001C60SPC500 V500R005C00

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-04-ipsec-en
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12656
Advisory

Link	Providers	Tags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-04-ipsec-en		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12656		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Feb 17, 2020

Updated Aug 4, 2024

Reserved Nov 29, 2019

Link CVE-2020-1830

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-1830

Red Hat

No data

ENISA EUVD

Assigner huawei

Published Feb 17, 2020

Updated Aug 4, 2024

Link EUVD-2020-12656

GitHub

No data