CVE-2020-1858
HIGHHuawei NIP6800, Secospace USG6600, and USG9500 Firmware - Denial of Service
Title source: llmDescription
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en
Scores
CVSS v3
7.5
EPSS
0.0022
EPSS Percentile
44.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (11)
huawei/nip6800_firmware
v500r001c30
huawei/nip6800_firmware
v500r001c60spc500
huawei/nip6800_firmware
v500r005c00spc100
huawei/secospace_usg6600_firmware
v500r001c30spc200
huawei/secospace_usg6600_firmware
v500r001c30spc600
huawei/secospace_usg6600_firmware
v500r001c60spc500
huawei/secospace_usg6600_firmware
v500r005c00spc100
huawei/usg9500_firmware
v500r001c30spc200
huawei/usg9500_firmware
v500r001c30spc600
huawei/usg9500_firmware
v500r001c60spc500
... and 1 more
Published
Feb 17, 2020
Tracked Since
Feb 18, 2026