CVE Vulnerabilities

CVE-2020-1816

Published: Feb 18, 2020 | Modified: Jul 21, 2021
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attackers can send constructed IPSEC packets to affected devices to exploit this vulnerability. Successful exploit could cause the IPSec function of the affected device abnormal.

Affected Software

Name Vendor Start Version End Version
Nip6800_firmware Huawei v500r001c30 (including) v500r001c30 (including)
Nip6800_firmware Huawei v500r001c60spc500 (including) v500r001c60spc500 (including)
Nip6800_firmware Huawei v500r005c00 (including) v500r005c00 (including)

References