CVE Vulnerabilities

CVE-2020-1816

Published: Feb 18, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attackers can send constructed IPSEC packets to affected devices to exploit this vulnerability. Successful exploit could cause the IPSec function of the affected device abnormal.

Affected Software

NameVendorStart VersionEnd Version
Nip6800_firmwareHuaweiv500r001c30 (including)v500r001c30 (including)
Nip6800_firmwareHuaweiv500r001c60spc500 (including)v500r001c60spc500 (including)
Nip6800_firmwareHuaweiv500r005c00 (including)v500r005c00 (including)

References