Out-of-Bounds Write Vulnerability in Huawei Secospace Products

CVE-2020-1876

Summary

The Secospace USG6600 and USG9500 series from Huawei are susceptible to an out-of-bounds write vulnerability that allows unauthenticated attackers to exploit the system. By sending specially crafted malformed packets to the devices, which lack sufficient validation, an attacker could trigger an unexpected reboot of the affected processes, leading to potential service disruption. Users are advised to review their device configurations and apply any available security updates to mitigate this risk.

References