Denial of Service Vulnerability in Huawei Security Products
CVE-2020-9213

7.5HIGH

Key Information:

Vendor
Huawei
Status
Ngfw Module;nip6300;nip6600;nip6800;secospace Usg6300;secospace Usg6500;secospace Usg6600;usg9500
Vendor
CVE Published:
22 March 2021

Summary

A denial of service vulnerability has been identified in specific Huawei security products. This issue arises from inadequate processing of crafted packets, which may allow an attacker to send a large number of specially designed packets to the affected devices. If successfully exploited, this vulnerability could lead to interruption of normal service operations, impacting the functionality and reliability of the affected products.

Affected Version(s)

NGFW Module;NIP6300;NIP6600;NIP6800;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R005C00

NGFW Module;NIP6300;NIP6600;NIP6800;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R001C30,V500R001C60,V500R005C00

NGFW Module;NIP6300;NIP6600;NIP6800;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500 V500R001C60,V500R005C00

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.