CVE-2020-1860
First published: Fri Feb 28 2020(Updated: )
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Nip6800 Firmware | =v500r001c30 | |
| Huawei Nip6800 Firmware | =v500r001c60 | |
| Huawei Nip6800 Firmware | =v500r005c00 | |
| Huawei NIP6800 | ||
| Huawei Secospace Usg6600 Firmware | =v500r001c30 | |
| Huawei Secospace Usg6600 Firmware | =v500r001c60 | |
| Huawei Secospace Usg6600 Firmware | =v500r005c00 | |
| Huawei Secospace USG6600 | ||
| Huawei Usg9500 Firmware | =v500r001c30 | |
| Huawei Usg9500 Firmware | =v500r001c60 | |
| Huawei Usg9500 Firmware | =v500r005c00 | |
| Huawei USG9500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-1860?
CVE-2020-1860 is a vulnerability in NIP6800, Secospace USG6600, and USG9500 products with certain versions of firmware.
What is the severity of CVE-2020-1860?
The severity of CVE-2020-1860 is high, with a CVSS score of 7.5.
Which products are affected by CVE-2020-1860?
NIP6800, Secospace USG6600, and USG9500 products with specific versions of firmware are affected by CVE-2020-1860.
How can attackers exploit CVE-2020-1860?
Attackers that can access the internal network can exploit CVE-2020-1860 with careful deployment.
What is the recommended action to fix CVE-2020-1860?
Updating to a fixed version of firmware is recommended to mitigate CVE-2020-1860.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei nip6800 firmware
- version/huawei nip6800 firmware/v500r001c30
- version/huawei nip6800 firmware/v500r001c60
- version/huawei nip6800 firmware/v500r005c00
- canonical/huawei nip6800
- canonical/huawei secospace usg6600 firmware
- version/huawei secospace usg6600 firmware/v500r001c30
- version/huawei secospace usg6600 firmware/v500r001c60
- version/huawei secospace usg6600 firmware/v500r005c00
- canonical/huawei secospace usg6600
- canonical/huawei usg9500 firmware
- version/huawei usg9500 firmware/v500r001c30
- version/huawei usg9500 firmware/v500r001c60
- version/huawei usg9500 firmware/v500r005c00
- canonical/huawei usg9500