Vulnerabilities > Huawei > Secospace Usg6600 Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-02-17 CVE-2020-1856 Unspecified vulnerability in Huawei products
Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability.
network
low complexity
huawei
7.5
2020-02-17 CVE-2020-1829 Double Free vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly.
network
low complexity
huawei CWE-415
7.5
2020-02-17 CVE-2020-1827 Improper Resource Shutdown or Release vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability.
network
low complexity
huawei CWE-404
7.5
2020-02-17 CVE-2020-1858 Unspecified vulnerability in Huawei products
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability.
network
low complexity
huawei
7.5
2020-02-17 CVE-2020-1857 Unspecified vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability.
local
low complexity
huawei
5.5
2020-02-17 CVE-2020-1828 Out-of-bounds Read vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message.
network
low complexity
huawei CWE-125
7.5
2020-01-03 CVE-2019-5304 Classic Buffer Overflow vulnerability in Huawei products
Some Huawei products have a buffer error vulnerability.
network
low complexity
huawei CWE-120
7.5
2019-12-13 CVE-2019-5258 Classic Buffer Overflow vulnerability in Huawei products
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability.
local
low complexity
huawei CWE-120
5.5
2019-12-13 CVE-2019-5257 Classic Buffer Overflow vulnerability in Huawei products
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability.
local
low complexity
huawei CWE-120
5.5
2019-12-13 CVE-2019-5256 NULL Pointer Dereference vulnerability in Huawei products
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability.
local
low complexity
huawei CWE-476
5.5