Vulnerability · Published Nov 13, 2020 · Assigned by huawei

CVE-2020-1847

High 7.5

In plain English

A high-severity security flaw in NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.7%top 45.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.

Affected products (as reported)

Vendor	Product	Versions
n/a	NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500	V500R001C30,V500R001C60

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-dos-en x_refsource_MISC