CVE-2020-9213
Last modified
CVE-2020-9213 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ngfw Module Firmware | v500r005c00 |
| Huawei | Nip6300 Firmware | v500r001c30 |
| Huawei | Nip6300 Firmware | v500r001c60 |
| Huawei | Nip6300 Firmware | v500r005c00 |
| Huawei | Nip6600 Firmware | v500r001c30 |
| Huawei | Nip6600 Firmware | v500r001c60 |
| Huawei | Nip6600 Firmware | v500r005c00 |
| Huawei | Nip6800 Firmware | v500r001c60 |
| Huawei | Nip6800 Firmware | v500r005c00 |
| Huawei | Secospace Usg6300 Firmware | v500r001c30 |
| Huawei | Secospace Usg6300 Firmware | v500r001c60 |
| Huawei | Secospace Usg6300 Firmware | v500r005c00 |
| Huawei | Secospace Usg6500 Firmware | v500r001c30 |
| Huawei | Secospace Usg6500 Firmware | v500r001c60 |
| Huawei | Secospace Usg6500 Firmware | v500r005c00 |
| Huawei | Secospace Usg6600 Firmware | v500r001c30 |
| Huawei | Secospace Usg6600 Firmware | v500r001c60 |
| Huawei | Secospace Usg6600 Firmware | v500r005c00 |
| Huawei | Usg9500 Firmware | v500r001c30 |
| Huawei | Usg9500 Firmware | v500r001c60 |
| Huawei | Usg9500 Firmware | v500r005c00 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9213?
How severe is CVE-2020-9213?
How do I fix CVE-2020-9213?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-9207There is an improper authentication vulnerability in some ve…7.8
- CVE-2020-9208There is an information leak vulnerability in iManager NetEc…6.5
- CVE-2020-9209There is a privilege escalation vulnerability in SMC2.0 prod…6.7
- CVE-2020-9210There is an insufficient integrity vulnerability in Huawei p…6.8
- CVE-2020-9211There is an out-of-bound read and write vulnerability in Hua…7.2
- CVE-2020-9212There is a vulnerability in some version of USG9500 that the…6.5
- CVE-2020-9222There is a privilege escalation vulnerability in Huawei Fusi…7.8
- CVE-2020-9223There is a denial of service vulnerability in some Huawei sm…7.5
- CVE-2020-9225FusionSphere OpenStack 6.5.1 have an improper permissions ma…7.8
- CVE-2020-9226HUAWEI P30 with versions earlier than 10.1.0.135(C00E135R2P1…5.5
- CVE-2020-9227Huawei Smart Phones Moana-AL00B with versions earlier than 1…5.5
- CVE-2020-9228FusionCompute 8.0.0 has an information disclosure vulnerabil…7.5
Are you affected by CVE-2020-9213?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST