1. Home
  2. CVE Database
  3. CVE-2020-1856
HIGH · 7.5

CVE-2020-1856

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can ex...

Vulnerability Description

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HuaweiNgfw Module Firmwarev500r001c30
HuaweiNgfw Module-
HuaweiNip6300 Firmwarev500r001c30
HuaweiNip6300-
HuaweiNip6600 Firmwarev500r001c30
HuaweiNip6600-
HuaweiSecospace Usg6500 Firmwarev500r001c30
HuaweiSecospace Usg6500-
HuaweiSecospace Usg6600 Firmwarev500r001c30
HuaweiSecospace Usg6600-
HuaweiUsg9500 Firmwarev500r001c30
HuaweiUsg9500-

References

FAQ

What is CVE-2020-1856?

CVE-2020-1856 is a vulnerability with a CVSS score of 7.5 (HIGH). Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can ex...

How severe is CVE-2020-1856?

CVE-2020-1856 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-1856?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ngfw Module Firmware, Huawei Ngfw Module, Huawei Nip6300 Firmware, Huawei Nip6300, Huawei Nip6600 Firmware.