Vulnerabilities > CVE-2020-1874 - Access of Uninitialized Pointer vulnerability in Huawei products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

huawei

CWE-824

NVD

Published: 2020-02-28

Updated: 2020-03-03

Summary

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Nip6800 Firmware V500R001C30 Huawei Nip6800 Firmware V500R001C60Spc500 Huawei Nip6800 Firmware V500R005C00Spc100 Huawei Secospace Usg6600 Firmware V500R001C30Spc200 Huawei Secospace Usg6600 Firmware V500R001C30Spc600 Huawei Secospace Usg6600 Firmware V500R001C60Spc500 Huawei Secospace Usg6600 Firmware V500R005C00Spc100 Huawei Usg9500 Firmware V500R001C30Spc200 Huawei Usg9500 Firmware V500R001C30Spc600 Huawei Usg9500 Firmware V500R001C60Spc500 Huawei Usg9500 Firmware V500R005C00Spc100	11
Hardware	Huawei Huawei Nip6800 - Huawei Secospace Usg6600 - Huawei Usg9500 -	3

Common Weakness Enumeration (CWE)

CWE-824 - Access of Uninitialized Pointer

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-invalidpointer-en