Vulnerability · Published Feb 17, 2020 · Assigned by huawei

CVE-2020-1858

High 7.5

In plain English

A high-severity security flaw in NIP6800 from Huawei. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.8%top 44.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.

Affected products (as reported)

Vendor	Product	Versions
Huawei	NIP6800	V500R001C30V500R001C60SPC500V500R005C00SPC100
Huawei	Secospace USG6600	V500R001C30SPC600V500R001C60SPC500V500R005C00SPC100
Huawei	USG9500	V500R001C30SPC600V500R001C60SPC500V500R005C00SPC100

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en x_refsource_CONFIRM