CVEvulnerability

CVE-2020-1874

5.5 MEDIUM Published 2020-02-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-824

Description

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.

Affected configurations

• huawei nip6800 firmware v500r001c30 • huawei nip6800 firmware v500r001c60spc500 • huawei nip6800 firmware v500r005c00spc100 • huawei secospace usg6600 firmware v500r001c30spc200 • huawei secospace usg6600 firmware v500r001c30spc600 • huawei secospace usg6600 firmware v500r001c60spc500 • huawei secospace usg6600 firmware v500r005c00spc100 • huawei usg9500 firmware v500r001c30spc200 • huawei usg9500 firmware v500r001c30spc600 • huawei usg9500 firmware v500r001c60spc500 • huawei usg9500 firmware v500r005c00spc100

Related

Weakness · CWE (1)

  • CWE-824 Access of Uninitialized Pointer weakness

References