CVE-2020-1874 — Access of Uninitialized Pointer in Huawei Nip6800 Firmware

CWE-824 — Access of Uninitialized Pointer3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 81.61%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Nip6800 Firmware Huawei Secospace Usg6600 Firmware Huawei Usg9500 Firmware

Timeline

PublishedFeb 28

Latest updateMay 24

Description

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDhuawei/secospace_usg6600_firmware4 versions+3

▶NVDhuawei/nip6800_firmwarev500r001c30, v500r001c60spc500, v500r005c00spc100+2

▶NVDhuawei/usg9500_firmware4 versions+3

🔴Vulnerability Details

GHSA

GHSA-vjqf-572p-w4xg: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability↗2022-05-24

▶

CVEList

CVE-2020-1874: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability↗2020-02-28

▶