CVE-2020-9075

6.5MEDIUM

Key Information:

Vendor
Huawei
Status
Secospace Usg6300;usg6300e
Vendor
CVE Published:
15 June 2020

Summary

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage.

Affected Version(s)

Secospace USG6300;USG6300E V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10

Secospace USG6300;USG6300E V600R006C00

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.