1. Home
  2. CVE Database
  3. CVE-2018-7994
HIGH · 7.5

CVE-2018-7994

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 hav...

Vulnerability Description

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiIps Modulev500r001c50
HuaweiNgfw Modulev500r001c50
HuaweiNip6300v500r001c50
HuaweiNip6600v500r001c50
HuaweiNip6800v500r001c50
HuaweiSecospace Usg6600v500r001c50
HuaweiUsg9500v500r001c50

Related Weaknesses (CWE)

CWE-772

References

FAQ

What is CVE-2018-7994?

CVE-2018-7994 is a vulnerability with a CVSS score of 7.5 (HIGH). Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 hav...

How severe is CVE-2018-7994?

CVE-2018-7994 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7994?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ips Module, Huawei Ngfw Module, Huawei Nip6300, Huawei Nip6600, Huawei Nip6800.