PT-2020-20476

CVE-2020-9075

·

Published

2020-06-10

·

Updated

2021-07-21

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Huawei Secospace USG6300;USG6300E versions V500R001C30 through V500R001C80 Huawei Secospace USG6300;USG6300E versions V500R005C00 through V500R005C10 Huawei Secospace USG6300;USG6300E version V600R006C00
Description The issue is related to insufficient input verification, allowing an attacker with limited privilege to access a specific directory. This could lead to information leakage.
Recommendations For versions V500R001C30 through V500R001C80, update to a version that includes the necessary security patches to fix the insufficient input verification issue. For versions V500R005C00 through V500R005C10, apply the recommended configuration changes to restrict access to the specific directory that can be exploited. For version V600R006C00, consider temporarily restricting access to the directory until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾