CVE Vulnerability

CVE-2020-1877

NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.

4.9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

Scope

4.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en Vendor Advisory
Configurations

Configuration 1
Information

Published : 2020-02-28 07:15

Updated : 2020-03-03 09:57

NVD link : CVE-2020-1877

Mitre link : CVE-2020-1877

Products Affected
No products.
CWE
CWE-824

Access of Uninitialized Pointer