Vulnerability in Huawei Ngfw Module
CVE-2020-9213
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.
EPSS: 0.007 (51.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei Ngfw_module
- Huawei Ngfw_module_firmware — versions v500r005c00
- Huawei Nip6300
- Huawei Nip6300_firmware — versions v500r001c30, v500r001c60, v500r005c00
- Huawei Nip6600
- Huawei Nip6600_firmware — versions v500r001c30, v500r001c60, v500r005c00
- Huawei Nip6800
- Huawei Nip6800_firmware — versions v500r001c60, v500r005c00
- Huawei Secospace_usg6300
- Huawei Secospace_usg6300_firmware — versions v500r001c30, v500r001c60, v500r005c00
References
- psirt@huawei.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-9213?
- CVE-2020-9213 is a high-severity vulnerability in Huawei Ngfw Module. CVSS score: 7.5/10. Published 2021-03-22.
- How severe is CVE-2020-9213?
- High severity. CVSS v3 base score is 7.5 out of 10.