PT-2021-12845 · Huawei · Huawei Nip6600+8

Published 2021-02-10 · Updated 2022-07-12 · CVE-2020-9213

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Huawei NGFW Module (affected versions not specified) Huawei NIP6300 (affected versions not specified) Huawei NIP6600 (affected versions not specified) Huawei NIP6800 (affected versions not specified) Huawei Secospace USG6300 (affected versions not specified) Huawei Secospace USG6500 (affected versions not specified) Huawei Secospace USG6600 (affected versions not specified) Huawei SG9500 (affected versions not specified)

Description: The issue is related to a denial of service vulnerability in certain Huawei products. It occurs due to the improper handling of packets, allowing an attacker to craft specific packets that may cause services to become abnormal. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations: For Huawei NGFW Module, update to a version that includes the fix for this issue. For Huawei NIP6300, update to a version that includes the fix for this issue. For Huawei NIP6600, update to a version that includes the fix for this issue. For Huawei NIP6800, update to a version that includes the fix for this issue. For Huawei Secospace USG6300, update to a version that includes the fix for this issue. For Huawei Secospace USG6500, update to a version that includes the fix for this issue. For Huawei Secospace USG6600, update to a version that includes the fix for this issue. For Huawei SG9500, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-9213

Affected Products

Huawei Ngfw Module

Huawei Nip6300

Huawei Nip6600

Huawei Nip6800

Huawei Usg9500

Huawei Secospace Usg6300

Huawei Secospace Usg6500

Huawei Secospace Usg6600

Huawei Vrp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-9213 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9213 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en · Vendor Advisory
• https://t.me/cibsecurity/25248 · Telegram Post