PT-2020-20521 · Huawei · Usg9500+3

Published 2020-01-22 · Updated 2020-12-28 · CVE-2020-9201

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NIP6800 (affected versions not specified) Secospace USG6600 (affected versions not specified) USG9500 (affected versions not specified)

Description The issue is related to an out-of-bounds read when the software parses DHCP messages that include crafted parameters. This could cause certain services to become abnormal. The software reads data past the end of the intended buffer.

Recommendations For NIP6800, there is no information about a newer version that contains a fix for this issue. For Secospace USG6600, there is no information about a newer version that contains a fix for this issue. For USG9500, there is no information about a newer version that contains a fix for this issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-9201

Affected Products

Huawei Vrp

Nip6800

Secospace Usg6600

Usg9500

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-9201 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9201 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en · Vendor Advisory
• https://t.me/cvenotify/7835 · Telegram Post
• https://t.me/cibsecurity/21286 · Telegram Post