CVE-2020-1828

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600…

published February 17, 2020

CVSS
—
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.3th percentile
Published
2020-02-17T19:49Z
EPSS history
Timeline
  • 17 FEB 19:49Z
    Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600…
    cvelistv5