CVE-2020-1875
First published: Fri Feb 28 2020(Updated: )
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Nip6800 Firmware | =v500r001c30 | |
| Huawei Nip6800 Firmware | =v500r001c60spc500 | |
| Huawei NIP6800 | ||
| Huawei Secospace Usg6600 Firmware | =v500r001c30spc200 | |
| Huawei Secospace Usg6600 Firmware | =v500r001c30spc600 | |
| Huawei Secospace Usg6600 Firmware | =v500r001c60spc500 | |
| Huawei Secospace USG6600 | ||
| Huawei Usg9500 Firmware | =v500r001c30spc200 | |
| Huawei Usg9500 Firmware | =v500r001c30spc600 | |
| Huawei Usg9500 Firmware | =v500r001c60spc500 | |
| Huawei USG9500 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-1875.
Which products are affected by this vulnerability?
The NIP6800, Secospace USG6600, and USG9500 products versions of V500R001C30, V500R001C60SPC500, and V500R005C00SPC100 are affected.
What is the severity of CVE-2020-1875?
The severity of CVE-2020-1875 is medium, with a CVSS score of 5.5.
How can this vulnerability be exploited?
This vulnerability can be exploited by causing certain process to become abnormal, leading to an invalid pointer access.
Is there a fix available for CVE-2020-1875?
Yes, Huawei has released a security advisory with fixes for this vulnerability. Please refer to the reference link for more information.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei nip6800 firmware
- version/huawei nip6800 firmware/v500r001c30
- version/huawei nip6800 firmware/v500r001c60spc500
- canonical/huawei nip6800
- canonical/huawei secospace usg6600 firmware
- version/huawei secospace usg6600 firmware/v500r001c30spc200
- version/huawei secospace usg6600 firmware/v500r001c30spc600
- version/huawei secospace usg6600 firmware/v500r001c60spc500
- canonical/huawei secospace usg6600
- canonical/huawei usg9500 firmware
- version/huawei usg9500 firmware/v500r001c30spc200
- version/huawei usg9500 firmware/v500r001c30spc600
- version/huawei usg9500 firmware/v500r001c60spc500
- canonical/huawei usg9500