Vulnerability in Huawei Usg9500

CVE-2020-9212

There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information leak.

EPSS: 0.006 (45.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

  • Huawei Usg9500
  • Huawei Usg9500_firmware — versions v500r005c00spc100, v500r005c00spc200, v500r005c20spc300
  • N/a Usg9500 — versions V500R005C00SPC100,V500R005C00SPC200,V500R005C20SPC300,V500R005C20SPC500,V500R005C20SPC600

References

Frequently asked questions

What is CVE-2020-9212?
CVE-2020-9212 is a medium-severity vulnerability in Huawei Usg9500. CVSS score: 6.5/10. Published 2021-03-22.
How severe is CVE-2020-9212?
Medium severity. CVSS v3 base score is 6.5 out of 10.