PT-2020-15140
CVE-2020-1883
·
Published
2020-06-03
·
Updated
2021-07-21
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Huawei NIP6800 (affected versions not specified)
Huawei Secospace USG6600 (affected versions not specified)
Huawei USG9500 (affected versions not specified)
Description
The issue is a memory leak vulnerability. An attacker with high privileges can exploit this by continuously performing specific operations, which can cause service abnormalities.
Recommendations
For Huawei NIP6800, restrict access to sensitive operations until a fix is available.
For Huawei Secospace USG6600, consider limiting the privileges of attackers to minimize the risk of exploitation.
For Huawei USG9500, as a temporary workaround, consider implementing additional monitoring to detect abnormal service behavior.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾