Huawei Ngfw Module Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Ngfw Module Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (56)

CVE-2016-4576 — CVSS 9.8 (critical): Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600…
CVE-2020-9099 — CVSS 9.8 (critical): Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with…
CVE-2021-37129 — CVSS 7.5 (high): There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not…
CVE-2016-4577 — CVSS 7.5 (high): Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls…
CVE-2017-15348 — CVSS 7.5 (high): Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace…
CVE-2017-17153 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17154 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17155 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17156 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17157 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17253 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17254 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17255 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17256 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17257 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17258 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2019-19415 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19416 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19417 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-5304 — CVSS 7.5 (high): Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages…
CVE-2020-1856 — CVSS 7.5 (high): Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00…
CVE-2020-9213 — CVSS 7.5 (high): There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an…
CVE-2021-22320 — CVSS 7.5 (high): There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit…
CVE-2021-22411 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can…
CVE-2020-9101 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific…
CVE-2021-22312 — CVSS 6.5 (medium): There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending…
CVE-2021-22356 — CVSS 5.9 (medium): There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this…
CVE-2017-17152 — CVSS 5.9 (medium): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17135 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17137 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17136 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17138 — CVSS 5.5 (medium): PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17251 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15332 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17295 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17296 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17297 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15331 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15334 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15335 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15336 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15350 — CVSS 5.3 (medium): The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30…
CVE-2017-17252 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2021-22342 — CVSS 4.9 (medium): There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege…
CVE-2021-22341 — CVSS 4.9 (medium): There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege…
CVE-2017-15337 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2020-1824 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1823 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1818 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1819 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1820 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1821 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2017-15338 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2017-15339 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2020-1822 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2017-17330 — CVSS 3.3 (low): Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20…