CVE-2020-1828: Input Validation
First published: Mon Feb 17 2020(Updated: )
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Nip6800 Firmware | =v500r001c30 | |
| Huawei Nip6800 Firmware | =v500r001c60spc500 | |
| Huawei Nip6800 Firmware | =v500r005c00 | |
| Huawei NIP6800 | ||
| Huawei Secospace Usg6600 Firmware | =v500r001c30spc200 | |
| Huawei Secospace Usg6600 Firmware | =v500r001c30spc600 | |
| Huawei Secospace Usg6600 Firmware | =v500r001c60spc500 | |
| Huawei Secospace Usg6600 Firmware | =v500r005c00 | |
| Huawei Secospace USG6600 | ||
| Huawei Usg9500 Firmware | =v500r001c30spc200 | |
| Huawei Usg9500 Firmware | =v500r001c30spc600 | |
| Huawei Usg9500 Firmware | =v500r001c60spc500 | |
| Huawei Usg9500 Firmware | =v500r005c00 | |
| Huawei USG9500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is vulnerability CVE-2020-1828?
Vulnerability CVE-2020-1828 is an input validation vulnerability in Huawei NIP6800 and Secospace USG6600 and USG9500, allowing attackers to bypass security measures.
Which software versions are affected by CVE-2020-1828?
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00, as well as Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 are affected by CVE-2020-1828.
What is the severity level of CVE-2020-1828?
CVE-2020-1828 has a severity level of 7.5 (high).
How can I fix vulnerability CVE-2020-1828?
To fix vulnerability CVE-2020-1828, it is recommended to update to the latest firmware versions provided by Huawei.
Where can I find more information about CVE-2020-1828?
You can find more information about vulnerability CVE-2020-1828 on the official Huawei Security Advisories page.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/softwarecombine
- agent/event
- agent/description
- agent/first-publish-date
- vendor/huawei
- canonical/huawei nip6800 firmware
- version/huawei nip6800 firmware/v500r001c30
- version/huawei nip6800 firmware/v500r001c60spc500
- version/huawei nip6800 firmware/v500r005c00
- canonical/huawei nip6800
- canonical/huawei secospace usg6600 firmware
- version/huawei secospace usg6600 firmware/v500r001c30spc200
- version/huawei secospace usg6600 firmware/v500r001c30spc600
- version/huawei secospace usg6600 firmware/v500r001c60spc500
- version/huawei secospace usg6600 firmware/v500r005c00
- canonical/huawei secospace usg6600
- canonical/huawei usg9500 firmware
- version/huawei usg9500 firmware/v500r001c30spc200
- version/huawei usg9500 firmware/v500r001c30spc600
- version/huawei usg9500 firmware/v500r001c60spc500
- version/huawei usg9500 firmware/v500r005c00
- canonical/huawei usg9500