PT-2020-1995 · Huawei · Usg9500+3
Published
2020-02-19
·
Updated
2022-04-22
·
CVE-2020-1881
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
NIP6800 versions V500R001C30 through V500R005C00SPC100
Secospace USG6600 versions V500R001C30 through V500R005C00SPC100
USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100
Description
The issue is related to a resource management error, which can be exploited to cause service abnormalities on affected devices. An attacker needs to perform specific operations to trigger a function of the affected device, and due to improper resource management of the function, the vulnerability can be exploited. This can lead to a denial of service.
Recommendations
For NIP6800 versions V500R001C30 through V500R005C00SPC100, update to a version that includes the fix for the resource management error vulnerability.
For Secospace USG6600 versions V500R001C30 through V500R005C00SPC100, update to a version that includes the fix for the resource management error vulnerability.
For USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100, update to a version that includes the fix for the resource management error vulnerability.
As a temporary workaround, consider restricting access to the affected function until a patch is available.
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Huawei Vrp
Nip6800
Secospace Usg6600
Usg9500