2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-1856" ,
"sourceIdentifier" : "psirt@huawei.com" ,
"published" : "2020-02-17T21:15:13.117" ,
"lastModified" : "2021-07-21T11:39:23.747" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage."
} ,
{
"lang" : "es" ,
"value" : "Los m\u00f3dulos Huawei NGFW, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600 y USG9500 versiones V500R001C30, V500R001C60 y V500R005C00, presentan una vulnerabilidad de fuga de informaci\u00f3n. Un atacante puede explotar esta vulnerabilidad mediante el env\u00edo de paquetes de peticiones espec\u00edficos hacia los dispositivos afectados. Una explotaci\u00f3n con \u00e9xito puede conllevar a una fuga de informaci\u00f3n."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.0
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "10423C71-8077-4381-AE42-C0934BF37DA2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "225678FC-8643-40CB-BB08-2E9B68B58217"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D57DC59-B234-463F-8BBD-631B7EE9928C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A26FE369-FDB8-4425-B51A-465A41FECE7E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3462B41-1DC4-4451-9575-F81C52F7A23C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "90C480FB-4D2C-49ED-A635-8B7BEFD95193"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9AC093ED-A979-4484-B758-1C16DF2D6030"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6EE084FC-27EB-4CE6-B529-508DA690C9D8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D6C14DF5-42F7-470F-B3DD-52B5A0770EC0"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "391BFC6B-9AE6-49D7-855A-CB94AD1EE5C1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "74B7C57C-7CD4-4FF0-BE51-2F4794FED7AE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E961C6AA-400A-41CF-A230-FE7182875F1F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-firewall-en" ,
"source" : "psirt@huawei.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}