There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information leak.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Usg9500_firmware | Huawei | v500r005c00spc100 (including) | v500r005c00spc100 (including) |
| Usg9500_firmware | Huawei | v500r005c00spc200 (including) | v500r005c00spc200 (including) |
| Usg9500_firmware | Huawei | v500r005c20spc300 (including) | v500r005c20spc300 (including) |
| Usg9500_firmware | Huawei | v500r005c20spc500 (including) | v500r005c20spc500 (including) |
| Usg9500_firmware | Huawei | v500r005c20spc600 (including) | v500r005c20spc600 (including) |