CVE-2020-1828

CVE-2020-1828: vulnerability in Huawei NIP6800

Published · Updated

Follow this CVE+ Monitor Secospace USG6600+ Monitor USG9500

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.
Affected products
Huawei · NIP6800Huawei · Secospace USG6600Huawei · USG9500
Related CVEs — Huawei NIP6800

In the same product, most dangerous first.

CVE-2019-19415—CVE-2019-19415EPSS 0.9%CVE-2019-19416—CVE-2019-19416EPSS 0.9%CVE-2019-19417—CVE-2019-19417EPSS 0.9%CVE-2020-1816—CVE-2020-1816EPSS 0.9%CVE-2020-1858—CVE-2020-1858EPSS 0.8%CVE-2020-1827—CVE-2020-1827EPSS 0.7%