Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2020-1860

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.

  • Published: Feb 28, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2020-1860
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
huawei / nip6800_firmware 500r001c30 500r001c30.x
huawei / nip6800_firmware 500r001c60 500r001c60.x
huawei / nip6800_firmware 500r005c00 500r005c00.x
huawei / secospace_usg6600_firmware 500r001c30 500r001c30.x
huawei / secospace_usg6600_firmware 500r001c60 500r001c60.x
huawei / secospace_usg6600_firmware 500r005c00 500r005c00.x
huawei / usg9500_firmware 500r001c30 500r001c30.x
huawei / usg9500_firmware 500r001c60 500r001c60.x
huawei / usg9500_firmware 500r005c00 500r005c00.x