PT-2020-15123 · Huawei · Nip6800+3

Published 2020-02-05 · Updated 2021-07-21 · CVE-2020-1857

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100 Huawei Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100

Description The issue is related to improper processing of some data, allowing a local authenticated attacker to exploit it through a series of operations. This may cause information leakage.

Recommendations For Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100, update to a version that fixes the improper data processing issue. For Huawei Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100, update to a version that fixes the improper data processing issue. As a temporary workaround, consider restricting access to sensitive data until a patch is available.

Fix

Related Identifiers

CVE-2020-1857

Affected Products

Huawei Vrp

Nip6800

Secospace Usg6600

Secospace Usg9500

References · 3

• https://osv.dev/vulnerability/CVE-2020-1857 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1857 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-leakage-en · Vendor Advisory