PT-2020-20476

CVE-2020-9075

·

تاريخ النشر

2020-06-10

·

تاريخ التحديث

2021-07-21

الوصف من

CVSS 3.1
6.5
متوسطة
المقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Huawei Secospace USG6300;USG6300E versions V500R001C30 through V500R001C80 Huawei Secospace USG6300;USG6300E versions V500R005C00 through V500R005C10 Huawei Secospace USG6300;USG6300E version V600R006C00
Description The issue is related to insufficient input verification, allowing an attacker with limited privilege to access a specific directory. This could lead to information leakage.
Recommendations For versions V500R001C30 through V500R001C80, update to a version that includes the necessary security patches to fix the insufficient input verification issue. For versions V500R005C00 through V500R005C10, apply the recommended configuration changes to restrict access to the specific directory that can be exploited. For version V600R006C00, consider temporarily restricting access to the directory until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾