Description
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.
Scores
CVSS v3
7.5
EPSS
0.0028
EPSS Percentile
51.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-772
Status
published
Products (8)
huawei/ips_module
v500r001c50
huawei/ngfw_module
v500r001c50
huawei/ngfw_module
v500r002c10
huawei/nip6300
v500r001c50
huawei/nip6600
v500r001c50
huawei/nip6800
v500r001c50
huawei/secospace_usg6600
v500r001c50
huawei/usg9500
v500r001c50
Published
Jul 31, 2018
Tracked Since
Feb 18, 2026