Huawei Secospace Usg6600 Firmware vulnerabilities
88 known vulnerabilities affecting huawei/secospace_usg6600_firmware.
Total CVEs
88
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH34MEDIUM49LOW3
Vulnerabilities
Page 3 of 5
CVE-2016-8802P4MEDIUMCVSS 6.5vv500r001c20spc100vv500r001c20spc101+1 more2017-04-02
CVE-2016-8802 [MEDIUM] CWE-119 CVE-2016-8802: The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V
The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6500 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6600 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200 allows authenticated attackers to setup
nvd
CVE-2016-8795P4MEDIUMCVSS 5.9vv500r001c002017-04-02
CVE-2016-8795 [MEDIUM] CWE-190 CVE-2016-8795: Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 w
nvd
CVE-2020-9127P4MEDIUMCVSS 6.7vv500r001c30vv500r001c602020-11-13
CVE-2020-9127 [MEDIUM] CWE-20 CVE-2020-9127: Some Huawei products have a command injection vulnerability. Due to insufficient input validation, a
Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,
nvd
CVE-2020-9101P4MEDIUMCVSS 6.5vv500r001c30vv500r001c60+2 more2020-07-18
CVE-2020-9101 [MEDIUM] CWE-787 CVE-2020-9101: There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts m
There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V
nvd
CVE-2021-22356P4MEDIUMCVSS 5.9vv500r001c30spc200vv500r001c30spc600+3 more2021-11-23
CVE-2021-22356 [MEDIUM] CWE-327 CVE-2021-22356: There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used i
There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions include: IPS Module V500R005C00SPC100, V500R005C00SPC200; N
nvd
CVE-2017-17166P4MEDIUMCVSS 5.3vv500r001c00vv500r001c20+2 more2018-02-15
CVE-2017-17166 [MEDIUM] CWE-400 CVE-2017-17166: Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Seco
Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a resource exhaustion vulnerability. The software does not
nvd
CVE-2017-17295P4MEDIUMCVSS 5.3vv100r001c10vv100r001c20+5 more2018-02-15
CVE-2017-17295 [MEDIUM] CWE-119 CVE-2017-17295: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13,
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008
nvd
CVE-2017-17297P4MEDIUMCVSS 5.3vv100r001c10vv100r001c20+5 more2018-02-15
CVE-2017-17297 [MEDIUM] CWE-119 CVE-2017-17297: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13,
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008
nvd
CVE-2017-15350P4MEDIUMCVSS 5.3vv100r001c10vv100r001c20+5 more2018-02-15
CVE-2017-15350 [MEDIUM] CWE-119 CVE-2017-15350: The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R0
The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001
nvd
CVE-2017-17152P4MEDIUMCVSS 5.9vv500r001c00vv500r001c00spc100+15 more2018-02-15
CVE-2017-17152 [MEDIUM] CWE-20 CVE-2017-17152: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V50
IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE, NGFW Module V500R001C00, V500R001C00SPC200, V500R001C0
nvd
CVE-2017-17251P4MEDIUMCVSS 5.3vv100r001c00spc200vv100r001c10+7 more2018-04-24
CVE-2017-17251 [MEDIUM] CWE-476 CVE-2017-17251: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13,
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V2
nvd
CVE-2017-17252P4MEDIUMCVSS 5.3vv100r001c00spc200vv100r001c10+7 more2018-04-24
CVE-2017-17252 [MEDIUM] CWE-125 CVE-2017-17252: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13,
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V2
nvd
CVE-2017-17296P4MEDIUMCVSS 5.3vv100r001c10vv100r001c20+5 more2018-02-15
CVE-2017-17296 [MEDIUM] CWE-772 CVE-2017-17296: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13,
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008
nvd
CVE-2017-15336P4MEDIUMCVSS 5.3vv100r001c00vv100r001c20+5 more2018-02-15
CVE-2017-15336 [MEDIUM] CWE-119 CVE-2017-15336: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20,
nvd
CVE-2017-15334P4MEDIUMCVSS 5.3vv100r001c00vv100r001c20+5 more2018-02-15
CVE-2017-15334 [MEDIUM] CWE-119 CVE-2017-15334: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20,
nvd
CVE-2017-15335P4MEDIUMCVSS 5.3vv100r001c00vv100r001c20+5 more2018-02-15
CVE-2017-15335 [MEDIUM] CWE-119 CVE-2017-15335: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30
The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20,
nvd
CVE-2020-1866P4MEDIUMCVSS 6.5vv500r001c30spc200vv500r001c30spc600+2 more2021-01-13
CVE-2020-1866 [MEDIUM] CWE-125 CVE-2020-1866: There is an out-of-bounds read vulnerability in several products. The software reads data past the e
There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700
nvd
CVE-2021-22321P4MEDIUMCVSS 5.3vv500r001c30vv500r001c602021-03-22
CVE-2021-22321 [MEDIUM] CWE-416 CVE-2021-22321: There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific oper
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2
nvd
CVE-2020-1824P4MEDIUMCVSS 5.3vv500r001c30vv500r005c002024-12-28
CVE-2020-1824 [MEDIUM] CVE-2020-1824: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability I
nvd
CVE-2020-1822P4MEDIUMCVSS 5.3vv500r001c30vv500r005c002024-12-28
CVE-2020-1822 [MEDIUM] CVE-2020-1822: There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities may disrupt service on the affected device. (Vulnerability I
nvd