CVE-2020-1828

Published: Feb 17, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.

Vendor	Product	Versions
Huawei	NIP6800	affected `V500R001C30` affected `V500R001C60SPC500` affected `V500R005C00`
Huawei	Secospace USG6600	affected `V500R001C30SPC200` affected `V500R001C30SPC600` affected `V500R001C60SPC500` affected `V500R005C00`
Huawei	USG9500	affected `V500R001C30SPC200` affected `V500R001C30SPC600` affected `V500R001C60SPC500` affected `V500R005C00`

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-01-ipsec-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-1828

Description

Affected Products

References