CVE-2020-1829

Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200,…

High7.5EPSS 0.74%

Published: 17 Feb 2020
Updated: 4 Aug 2024
Reserved: 29 Nov 2019
Assigned by: huawei

Description

Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service.

Scores

CVSS scores of CVE-2020-1829, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.74% · top 45% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Double Free Memory
CWE-415 (opens in a new tab)All about CWE-415 and its CVEs

Affected products

Huawei · NIP6800
- affected V500R001C30
- affected V500R001C60SPC500
Huawei · Secospace USG6600
- affected V500R001C30SPC200
- affected V500R001C30SPC600
- affected V500R001C60SPC500
Huawei · USG9500
- affected V500R001C30SPC200
- affected V500R001C30SPC600
- affected V500R001C60SPC500

References (1)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-ipsec-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-1829](https://trackcve.app/badge/CVE-2020-1829.svg)](https://trackcve.app/cve/CVE-2020-1829)

Record last updated 4 Aug 2024, 06:46 UTC.