CVE-2020-1860: High severity Huawei Nip6800 Firmware vulnerability
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1860?
CVE-2020-1860 is a vulnerability in NIP6800, Secospace USG6600, and USG9500 products with certain versions of firmware.
What is the severity of CVE-2020-1860?
The severity of CVE-2020-1860 is high, with a CVSS score of 7.5.
Which products are affected by CVE-2020-1860?
NIP6800, Secospace USG6600, and USG9500 products with specific versions of firmware are affected by CVE-2020-1860.
How can attackers exploit CVE-2020-1860?
Attackers that can access the internal network can exploit CVE-2020-1860 with careful deployment.
What is the recommended action to fix CVE-2020-1860?
Updating to a fixed version of firmware is recommended to mitigate CVE-2020-1860.