ZeroHour

CVE-2020-9201

CVSS 3.1
6.5 medium
EPSS
<1%p25
Published
()
Modified
Description

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.

Vendors
huawei
Products
nip6800 firmware, secospace usg6600 firmware, usg9500 firmware
Weakness
CWE-125
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.