2019-11-29 22:01:19 +00:00
{
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ID" : "CVE-2020-1858" ,
2020-02-17 20:01:12 +00:00
"ASSIGNER" : "psirt@huawei.com" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Huawei" ,
"product" : {
"product_data" : [
{
"product_name" : "NIP6800" ,
"version" : {
"version_data" : [
{
"version_value" : "V500R001C30"
} ,
{
"version_value" : "V500R001C60SPC500"
} ,
{
"version_value" : "V500R005C00SPC100"
}
]
}
} ,
{
"product_name" : "Secospace USG6600" ,
"version" : {
"version_data" : [
{
"version_value" : "V500R001C30SPC600"
} ,
{
"version_value" : "V500R001C60SPC500"
} ,
{
"version_value" : "V500R005C00SPC100"
}
]
}
} ,
{
"product_name" : "USG9500" ,
"version" : {
"version_data" : [
{
"version_value" : "V500R001C30SPC600"
} ,
{
"version_value" : "V500R001C60SPC500"
} ,
{
"version_value" : "V500R005C00SPC100"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Denial of Service"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"refsource" : "CONFIRM" ,
"name" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en" ,
"url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en"
2020-02-19 06:01:04 +00:00
} ,
{
"refsource" : "CONFIRM" ,
"name" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en" ,
"url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en"
2020-02-17 20:01:12 +00:00
}
]
2019-11-29 22:01:19 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2020-02-17 20:01:12 +00:00
"value" : "Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service."
2019-11-29 22:01:19 +00:00
}
]
}
}