Huawei Secospace Usg6600 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Secospace Usg6600 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (88)

CVE-2016-4576 — CVSS 9.8 (critical): Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600…
CVE-2020-9099 — CVSS 9.8 (critical): Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with…
CVE-2019-5254 — CVSS 8.6 (high): Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace…
CVE-2017-17157 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2016-4577 — CVSS 7.5 (high): Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls…
CVE-2017-15348 — CVSS 7.5 (high): Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace…
CVE-2017-17153 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17154 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17155 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17156 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17253 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17254 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17255 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17256 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17257 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17258 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-8147 — CVSS 7.5 (high): AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200…
CVE-2017-8174 — CVSS 7.5 (high): Huawei USG6300 V100R001C30SPC300 and USG6600 with software of V100R001C30SPC500,V100R001C30SPC600,V100R001C30SPC700,V100R001C30SPC800 have…
CVE-2019-19415 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19416 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19417 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-5304 — CVSS 7.5 (high): Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages…
CVE-2020-1815 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1816 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1827 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions…
CVE-2020-1828 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1829 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600…
CVE-2020-1847 — CVSS 7.5 (high): There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific…
CVE-2020-1856 — CVSS 7.5 (high): Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00…
CVE-2020-1858 — CVSS 7.5 (high): Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600…
CVE-2020-1860 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass…
CVE-2020-1873 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read…
CVE-2020-1876 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write…
CVE-2020-1881 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource…
CVE-2020-9213 — CVSS 7.5 (high): There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an…
CVE-2021-22320 — CVSS 7.5 (high): There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit…
CVE-2020-9127 — CVSS 6.7 (medium): Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may…
CVE-2016-8781 — CVSS 6.5 (medium): Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500 with software V500R001C20, Secospace USG6600…
CVE-2021-22312 — CVSS 6.5 (medium): There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending…
CVE-2020-9075 — CVSS 6.5 (medium): Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006…
CVE-2020-9201 — CVSS 6.5 (medium): There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the…
CVE-2016-8802 — CVSS 6.5 (medium): The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200…
CVE-2021-22411 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can…
CVE-2020-1866 — CVSS 6.5 (medium): There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing…
CVE-2020-9101 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific…
CVE-2016-8795 — CVSS 5.9 (medium): Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with…
CVE-2021-22356 — CVSS 5.9 (medium): There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this…
CVE-2017-17152 — CVSS 5.9 (medium): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2020-1874 — CVSS 5.5 (medium): NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access…
CVE-2020-1857 — CVSS 5.5 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions…
CVE-2020-1875 — CVSS 5.5 (medium): NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access…
CVE-2017-17163 — CVSS 5.5 (medium): Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An…
CVE-2017-17138 — CVSS 5.5 (medium): PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17135 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17136 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17137 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2019-5255 — CVSS 5.5 (medium): Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace…
CVE-2019-5257 — CVSS 5.5 (medium): Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a…
CVE-2019-5256 — CVSS 5.5 (medium): Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace…
CVE-2019-5258 — CVSS 5.5 (medium): Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace…
CVE-2017-17162 — CVSS 5.5 (medium): Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500…
CVE-2020-1814 — CVSS 5.3 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2021-22321 — CVSS 5.3 (medium): There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers…
CVE-2017-17297 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15334 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15335 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15336 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15350 — CVSS 5.3 (medium): The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30…
CVE-2020-1830 — CVSS 5.3 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2017-17166 — CVSS 5.3 (medium): Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20…
CVE-2017-17251 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17252 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17295 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17296 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2021-22341 — CVSS 4.9 (medium): There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege…
CVE-2020-1883 — CVSS 4.9 (medium): Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this…
CVE-2020-1877 — CVSS 4.4 (medium): NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access…
CVE-2021-22310 — CVSS 4.4 (medium): There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file…
CVE-2020-1822 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1824 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2017-15339 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2017-15338 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2017-15337 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2020-1823 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1818 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1821 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1820 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…
CVE-2020-1819 — CVSS 3.7 (low): There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some…