PT-2020-1997 · Huawei · Secospace Usg9500+3

Published 2020-02-05 · Updated 2020-02-20 · CVE-2020-1829

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500 Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500

Description The issue is related to the IPSec module handling a message improperly, which can lead to double free memory when a specific message is sent by attackers. This may compromise normal service. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500, consider disabling the IPSec module as a temporary workaround until a patch is available. For Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500, restrict access to the IPSec module to minimize the risk of exploitation.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2020-01314

CVE-2020-1829

Affected Products

Huawei Nip6800

Huawei Vrp

Secospace Usg6600

Secospace Usg9500

References · 5

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-ipsec-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01314 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1829 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1829 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-ipsec-en · Note