CVE-2020-1858

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600,…

High7.5EPSS 0.77%

Published: 17 Feb 2020
Updated: 4 Aug 2024
Reserved: 29 Nov 2019
Assigned by: huawei

Description

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.

Scores

CVSS scores of CVE-2020-1858, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.77% · top 44% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Denial of Service

Affected products

Huawei · NIP6800
- affected V500R001C30
- affected V500R001C60SPC500
- affected V500R005C00SPC100
Huawei · Secospace USG6600
- affected V500R001C30SPC600
- affected V500R001C60SPC500
- affected V500R005C00SPC100
Huawei · USG9500
- affected V500R001C30SPC600
- affected V500R001C60SPC500
- affected V500R005C00SPC100

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en (opens in a new tab)x_refsource_CONFIRMx_transferred
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-1858](https://trackcve.app/badge/CVE-2020-1858.svg)](https://trackcve.app/cve/CVE-2020-1858)

Record last updated 4 Aug 2024, 06:53 UTC.