Vulnerability in Huawei Ngfw Module
CVE-2020-9213
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.008 (54.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 54.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.008 · change: +0.000
Affected products
- Huawei Ngfw Module
- Huawei Ngfw Module Firmware — versions v500r005c00
- Huawei Nip6300
- Huawei Nip6300 Firmware — versions v500r001c30, v500r001c60, v500r005c00
- Huawei Nip6600
- Huawei Nip6600 Firmware — versions v500r001c30, v500r001c60, v500r005c00
- Huawei Nip6800
- Huawei Nip6800 Firmware — versions v500r001c60, v500r005c00
- Huawei Secospace Usg6300
- Huawei Secospace Usg6300 Firmware — versions v500r001c30, v500r001c60, v500r005c00
References
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en (Vendor Advisory)
Frequently asked questions
- What is CVE-2020-9213?
- CVE-2020-9213 is a high-severity vulnerability in Huawei Ngfw Module. CVSS score: 7.5/10. Published 2021-03-22.
- How severe is CVE-2020-9213?
- High severity. CVSS v3 base score is 7.5 out of 10.