CVE-2020-1857

Name of the Vulnerable Software and Affected Versions Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100 Huawei Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100

Description The issue is related to improper processing of some data, allowing a local authenticated attacker to exploit it through a series of operations. This may cause information leakage.

Recommendations For Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100, update to a version that fixes the improper data processing issue. For Huawei Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100, update to a version that fixes the improper data processing issue. As a temporary workaround, consider restricting access to sensitive data until a patch is available.