Vulnerability · Published Feb 17, 2020 · Assigned by huawei
CVE-2020-1830
Medium 5.3
In plain English
A medium-severity security flaw in NIP6800 from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This causes 1 byte out-of-bound read, compromising normal service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Huawei | NIP6800 | V500R001C30V500R001C60SPC500V500R005C00 |
| Huawei | Secospace USG6600, USG9500 | V500R001C30SPC200V500R001C30SPC600V500R001C60SPC500V500R005C00 |