PT-2020-20493 · Huawei · Secospace Usg6300+6

Published 2020-07-15 · Updated 2020-07-24 · CVE-2020-9101

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IPS Module versions V500R005C00, V500R005C10 NGFW Module versions V500R005C00, V500R005C10 Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10 Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10 Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10 USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10

Description The issue is an out-of-bounds write vulnerability. An unauthenticated attacker can craft malformed packets with a specific parameter and send them to the affected products. Due to insufficient validation of packets, this may be exploited to cause the process to reboot.

Recommendations For IPS Module versions V500R005C00, V500R005C10, update to a version that includes the fix for this issue. For NGFW Module versions V500R005C00, V500R005C10, update to a version that includes the fix for this issue. For Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10, update to a version that includes the fix for this issue. For Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10, update to a version that includes the fix for this issue. For Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10, update to a version that includes the fix for this issue. For USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10, update to a version that includes the fix for this issue. As a temporary workaround, consider implementing additional validation for incoming packets to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-9101

Affected Products

Huawei Vrp

Ips Module

Ngfw Module

Secospace Usg6300

Secospace Usg6500

Secospace Usg6600

Usg9500

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-9101 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200715-01-outofboundswrite-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9101 · Vendor Advisory