Huawei Usg9500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei Usg9500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (81)

CVE-2016-4576 — CVSS 9.8 (critical): Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600…
CVE-2020-9099 — CVSS 9.8 (critical): Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with…
CVE-2014-9136 — CVSS 8.8 (high): Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack…
CVE-2014-9137 — CVSS 8.8 (high): Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier…
CVE-2020-1871 — CVSS 8.2 (high): USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200…
CVE-2017-17154 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2016-4577 — CVSS 7.5 (high): Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls…
CVE-2017-15348 — CVSS 7.5 (high): Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace…
CVE-2017-17153 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17155 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17156 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17157 — CVSS 7.5 (high): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2017-17253 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17254 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17255 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17256 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17257 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17258 — CVSS 7.5 (high): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-8167 — CVSS 7.5 (high): Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the…
CVE-2019-19415 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19416 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-19417 — CVSS 7.5 (high): The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three…
CVE-2019-5273 — CVSS 7.5 (high): USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the…
CVE-2019-5274 — CVSS 7.5 (high): USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the…
CVE-2019-5275 — CVSS 7.5 (high): USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the…
CVE-2020-1815 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1816 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1827 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions…
CVE-2020-1828 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2020-1829 — CVSS 7.5 (high): Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600…
CVE-2020-1847 — CVSS 7.5 (high): There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific…
CVE-2020-1856 — CVSS 7.5 (high): Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00…
CVE-2020-1858 — CVSS 7.5 (high): Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600…
CVE-2020-1860 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass…
CVE-2020-1873 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read…
CVE-2020-1876 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write…
CVE-2020-1881 — CVSS 7.5 (high): NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource…
CVE-2020-9213 — CVSS 7.5 (high): There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an…
CVE-2021-22309 — CVSS 7.5 (high): There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit…
CVE-2021-37129 — CVSS 7.5 (high): There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not…
CVE-2020-9127 — CVSS 6.7 (medium): Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may…
CVE-2021-22312 — CVSS 6.5 (medium): There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending…
CVE-2021-22411 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can…
CVE-2020-1866 — CVSS 6.5 (medium): There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing…
CVE-2020-9101 — CVSS 6.5 (medium): There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific…
CVE-2020-9201 — CVSS 6.5 (medium): There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the…
CVE-2020-9212 — CVSS 6.5 (medium): There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The…
CVE-2017-17152 — CVSS 5.9 (medium): IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508…
CVE-2021-22356 — CVSS 5.9 (medium): There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this…
CVE-2017-17136 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17138 — CVSS 5.5 (medium): PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2020-1874 — CVSS 5.5 (medium): NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access…
CVE-2017-17162 — CVSS 5.5 (medium): Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500…
CVE-2020-1857 — CVSS 5.5 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions…
CVE-2020-1875 — CVSS 5.5 (medium): NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access…
CVE-2017-17135 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17137 — CVSS 5.5 (medium): PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00…
CVE-2017-17296 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2020-1814 — CVSS 5.3 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2017-15331 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15335 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15336 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2017-15350 — CVSS 5.3 (medium): The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30…
CVE-2017-15334 — CVSS 5.3 (medium): The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20…
CVE-2020-1830 — CVSS 5.3 (medium): Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200…
CVE-2017-17251 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17252 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-15332 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17295 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2017-17297 — CVSS 5.3 (medium): Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02…
CVE-2021-22321 — CVSS 5.3 (medium): There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers…
CVE-2021-22360 — CVSS 4.9 (medium): There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An…
CVE-2020-1883 — CVSS 4.9 (medium): Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this…
CVE-2019-5272 — CVSS 4.9 (medium): USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products…
CVE-2021-22342 — CVSS 4.9 (medium): There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege…
CVE-2021-22310 — CVSS 4.4 (medium): There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file…
CVE-2020-1877 — CVSS 4.4 (medium): NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access…
CVE-2017-15337 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2017-15339 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2017-15338 — CVSS 3.7 (low): The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30…
CVE-2019-19411 — CVSS 3.7 (low): USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200…