CVE-2020-1877 — Access of Uninitialized Pointer in Huawei Nip6800 Firmware

CWE-824 — Access of Uninitialized Pointer3 documents3 sources

Severity

4.4MEDIUMNVD

EPSS

0.1%

top 80.00%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Nip6800 Firmware Huawei Secospace Usg6600 Firmware Huawei Usg9500 Firmware

Timeline

PublishedFeb 28

Latest updateMay 24

Description

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages3 packages

▶NVDhuawei/secospace_usg6600_firmware4 versions+3

▶NVDhuawei/nip6800_firmwarev500r001c30, v500r001c60spc500, v500r005c00+2

▶NVDhuawei/usg9500_firmware4 versions+3

🔴Vulnerability Details

GHSA

GHSA-x6w2-r9qf-4mp5: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability↗2022-05-24

▶

CVEList

CVE-2020-1877: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability↗2020-02-28

▶