17 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 29EXPL: 0

CVE-2020-9213

https://notcve.org/view.php?id=CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500. Se presenta una vulnerabilidad de denegación de servicio en algunos productos Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en •

CVSS: 6.5EPSS: 0%CPEs: 26EXPL: 0

CVE-2020-1866

https://notcve.org/view.php?id=CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00. Se presenta una vulnerabilidad de lectura fuera de límites en varios productos. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en • CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0

CVE-2020-9201

https://notcve.org/view.php?id=CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal. Se presenta una vulnerabilidad de lectura fuera de límites en algunas versiones de NIP6800, Secospace USG6600 y USG9500. El software lee los datos más allá del final del búfer previsto cuando se analizan los mensajes DHCP, incluyendo el parámetro diseñado. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en • CWE-125: Out-of-bounds Read •

CVSS: 9.8EPSS: 0%CPEs: 89EXPL: 0

CVE-2020-9099

https://notcve.org/view.php?id=CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device. Los productos Huawei IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 con versiones de V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30, presenta una vulnerabilidad de autenticación inapropiada. Los atacantes necesitan llevar a cabo algunas operaciones para explotar la vulnerabilidad. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en • CWE-287: Improper Authentication •

CVSS: 4.9EPSS: 0%CPEs: 14EXPL: 0

CVE-2020-1877

https://notcve.org/view.php?id=CVE-2020-1877

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot. NIP6800; Secospace USG6600; USG9500 con versiones de V500R001C30; V500R001C60SPC500; V500R005C00SPC100, presentan una vulnerabilidad de acceso de puntero no válido. El sistema del software accede a un puntero no válido cuando el administrador inicia sesión en el dispositivo y lleva a cabo algunas operaciones. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en • CWE-824: Access of Uninitialized Pointer •