USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.
| Software | From | Fixed in |
|---|---|---|
| huawei / usg9500_firmware | 500r001c30spc100 | 500r001c30spc100.x |
| huawei / usg9500_firmware | 500r001c30spc200 | 500r001c30spc200.x |
| huawei / usg9500_firmware | 500r001c30spc600 | 500r001c30spc600.x |
| huawei / usg9500_firmware | 500r001c60spc500 | 500r001c60spc500.x |
| huawei / usg9500_firmware | 500r005c00spc100 | 500r005c00spc100.x |
| huawei / usg9500_firmware | 500r005c00spc200 | 500r005c00spc200.x |