CVSS: 4.4EPSS: 0%CPEs: 26EXPL: 0CVE-2021-22310
https://notcve.org/view.php?id=CVE-2021-22310
22 Mar 2021 — There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 7.5EPSS: 0%CPEs: 29EXPL: 0CVE-2020-9213
https://notcve.org/view.php?id=CVE-2020-9213
22 Mar 2021 — There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500. Se presenta una vulnerabilidad de denegación de servicio en algunos productos Huawei. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en •
CVSS: 6.5EPSS: 0%CPEs: 26EXPL: 0CVE-2020-1866
https://notcve.org/view.php?id=CVE-2020-1866
13 Jan 2021 — There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V5... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0CVE-2020-9201
https://notcve.org/view.php?id=CVE-2020-9201
24 Dec 2020 — There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal. Se presenta una vulnerabilidad de lectura fuera de límites en algunas versiones de NIP6800, Secospace USG6600 y USG9500. El software lee los datos más allá del final del búfer previsto cuando se analizan los mensajes DHCP, incluy... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 26EXPL: 0CVE-2020-9101
https://notcve.org/view.php?id=CVE-2020-9101
17 Jul 2020 — There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V500R005C10; NGFW Module versions V500R005C00, V500R005C10; Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6500 ver... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-01-outofboundswrite-en • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2020-9075
https://notcve.org/view.php?id=CVE-2020-9075
15 Jun 2020 — Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage. Los productos Huawei Secospace USG6300; USG6300E con versiones de V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V50... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 89EXPL: 0CVE-2020-9099
https://notcve.org/view.php?id=CVE-2020-9099
08 Jun 2020 — Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device. Los produc... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en • CWE-287: Improper Authentication •
CVSS: 4.9EPSS: 0%CPEs: 14EXPL: 0CVE-2020-1877
https://notcve.org/view.php?id=CVE-2020-1877
28 Feb 2020 — NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot. NIP6800; Secospace USG6600; USG9500 con versiones de V500R001C30; V500R001C60SPC500; V500R005C00SPC100, presentan una vulnerabilidad de acceso de puntero no válido. El sistema del software acced... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en • CWE-824: Access of Uninitialized Pointer •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2020-1876
https://notcve.org/view.php?id=CVE-2020-1876
28 Feb 2020 — NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. NIP6800; Secospace USG6600; USG9500 con versiones de V500R001C30; V500R001C60SPC500; V500R005C00SPC100, presentan una vulnerabilidad de escritura fu... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0CVE-2020-1860
https://notcve.org/view.php?id=CVE-2020-1860
28 Feb 2020 — NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet. Los productos NIP6800; Secospace USG6600; USG9500 con versiones de V500R001C30; V500R001C60SPC500; V500R005C00SPC100, presentan una vulnera... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-firewall-en •