Description (CNA)
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei / NIP6800 | affected V500R001C30; affected V500R001C60SPC500; affected V500R005C00 |
| Huawei / Secospace USG6600 | affected V500R001C30SPC200; affected V500R001C30SPC600; affected V500R001C60SPC500; affected V500R005C00 |
| Huawei / USG9500 | affected V500R001C30SPC200; affected V500R001C30SPC600; affected V500R001C60SPC500; affected V500R005C00 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.