CVE-2020-1877 - NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability

Back Back to CVE browser

MEDIUM

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability

Published Feb 28, 2020

4.4

MEDIUM

CVSS 3.1

EPSS 0.20%

Description

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.

Affected products

Vendor n/a Product NIP6800;Secospace USG6600;USG9500 Default
n/a
- Version
  V500R001C30,V500R001C60SPC500,V500R005C00
  Status
  affected
  Constraints
  -
- Version
  V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

NIP6800;Secospace USG6600;USG9500

n/a

Version	Status	Constraints
V500R001C30,V500R001C60SPC500,V500R005C00	affected	-
V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-824

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12703
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12703		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en		x_refsource_MISCVendor Advisory