Usg9500 Firmware (Huawei) - vulnerabilities (CVEs)

81 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2021-11-23. Vendor: Huawei.

CVEs of Usg9500 Firmware

CVE-2021-22356 - CVSS 5.9 (medium), 2021-11-23: There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by…
CVE-2021-37129 - CVSS 7.5 (high), 2021-10-27: There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify…
CVE-2021-22342 - CVSS 4.9 (medium), 2021-06-22: There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit…
CVE-2021-22411 - CVSS 6.5 (medium), 2021-05-27: There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this…
CVE-2021-22360 - CVSS 4.9 (medium), 2021-05-27: There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication…
CVE-2021-22312 - CVSS 6.5 (medium), 2021-04-08: There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to…
CVE-2021-22321 - CVSS 5.3 (medium), 2021-03-22: There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this…
CVE-2021-22310 - CVSS 4.4 (medium), 2021-03-22: There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can…
CVE-2020-9212 - CVSS 6.5 (medium), 2021-03-22: There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit…
CVE-2021-22309 - CVSS 7.5 (high), 2021-03-22: There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability…
CVE-2020-9213 - CVSS 7.5 (high), 2021-03-22: There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft…
CVE-2020-1866 - CVSS 6.5 (medium), 2021-01-13: There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted…
CVE-2020-9201 - CVSS 6.5 (medium), 2020-12-24: There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended…
CVE-2020-9127 - CVSS 6.7 (medium), 2020-11-13: Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious…
CVE-2020-1847 - CVSS 7.5 (high), 2020-11-13: There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote,…
CVE-2020-9101 - CVSS 6.5 (medium), 2020-07-18: There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the…
CVE-2019-19416 - CVSS 7.5 (high), 2020-07-08: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending…
CVE-2019-19415 - CVSS 7.5 (high), 2020-07-08: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending…
CVE-2019-19417 - CVSS 7.5 (high), 2020-07-08: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending…
CVE-2020-9099 - CVSS 9.8 (critical), 2020-06-08: Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of…
CVE-2020-1883 - CVSS 4.9 (medium), 2020-06-05: Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by…
CVE-2020-1876 - CVSS 7.5 (high), 2020-02-28: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An…
CVE-2020-1881 - CVSS 7.5 (high), 2020-02-28: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error…
CVE-2020-1877 - CVSS 4.4 (medium), 2020-02-28: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The…
CVE-2020-1873 - CVSS 7.5 (high), 2020-02-28: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An…
CVE-2020-1860 - CVSS 7.5 (high), 2020-02-28: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability.…
CVE-2020-1875 - CVSS 5.5 (medium), 2020-02-28: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The…
CVE-2020-1874 - CVSS 5.5 (medium), 2020-02-28: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The…
CVE-2020-1814 - CVSS 5.3 (medium), 2020-02-18: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,…
CVE-2020-1830 - CVSS 5.3 (medium), 2020-02-18: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,…
CVE-2020-1816 - CVSS 7.5 (high), 2020-02-18: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,…
CVE-2020-1815 - CVSS 7.5 (high), 2020-02-18: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,…
CVE-2020-1856 - CVSS 7.5 (high), 2020-02-17: Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information…
CVE-2020-1829 - CVSS 7.5 (high), 2020-02-17: Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and…
CVE-2020-1827 - CVSS 7.5 (high), 2020-02-17: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200,…
CVE-2020-1857 - CVSS 5.5 (medium), 2020-02-17: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200,…
CVE-2020-1828 - CVSS 7.5 (high), 2020-02-17: Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600,…
CVE-2020-1858 - CVSS 7.5 (high), 2020-02-17: Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and…
CVE-2019-19411 - CVSS 3.7 (low), 2020-01-21: USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information…
CVE-2020-1871 - CVSS 8.2 (high), 2020-01-03: USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper…
CVE-2019-5275 - CVSS 7.5 (high), 2019-12-26: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products…
CVE-2019-5274 - CVSS 7.5 (high), 2019-12-26: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products…
CVE-2019-5273 - CVSS 7.5 (high), 2019-12-26: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products…
CVE-2019-5272 - CVSS 4.9 (medium), 2019-12-26: USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the…
CVE-2017-17257 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17253 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17256 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17252 - CVSS 5.3 (medium), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17255 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17258 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17251 - CVSS 5.3 (medium), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17254 - CVSS 7.5 (high), 2018-04-24: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17135 - CVSS 5.5 (medium), 2018-03-05: PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600…
CVE-2017-17138 - CVSS 5.5 (medium), 2018-03-05: PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600…
CVE-2017-17137 - CVSS 5.5 (medium), 2018-03-05: PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600…
CVE-2017-17136 - CVSS 5.5 (medium), 2018-03-05: PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600…
CVE-2017-17295 - CVSS 5.3 (medium), 2018-02-15: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17297 - CVSS 5.3 (medium), 2018-02-15: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17296 - CVSS 5.3 (medium), 2018-02-15: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-17162 - CVSS 5.5 (medium), 2018-02-15: Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500…
CVE-2017-17156 - CVSS 7.5 (high), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-17152 - CVSS 5.9 (medium), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-17155 - CVSS 7.5 (high), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-15350 - CVSS 5.3 (medium), 2018-02-15: The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20,…
CVE-2017-17154 - CVSS 7.5 (high), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-17157 - CVSS 7.5 (high), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-15348 - CVSS 7.5 (high), 2018-02-15: Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500…
CVE-2017-17153 - CVSS 7.5 (high), 2018-02-15: IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20,…
CVE-2017-15332 - CVSS 5.3 (medium), 2018-02-15: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-15336 - CVSS 5.3 (medium), 2018-02-15: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW…
CVE-2017-15339 - CVSS 3.7 (low), 2018-02-15: The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module…
CVE-2017-15331 - CVSS 5.3 (medium), 2018-02-15: Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20,…
CVE-2017-15335 - CVSS 5.3 (medium), 2018-02-15: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW…
CVE-2017-15338 - CVSS 3.7 (low), 2018-02-15: The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module…
CVE-2017-15334 - CVSS 5.3 (medium), 2018-02-15: The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW…
CVE-2017-15337 - CVSS 3.7 (low), 2018-02-15: The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module…
CVE-2017-8167 - CVSS 7.5 (high), 2017-11-22: Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending…
CVE-2014-9137 - CVSS 8.8 (high), 2017-04-02: Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with…
CVE-2014-9136 - CVSS 8.8 (high), 2017-04-02: Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of…
CVE-2016-4577 - CVSS 7.5 (high), 2016-05-23: Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before…
CVE-2016-4576 - CVSS 9.8 (critical), 2016-05-23: Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300,…