Information disclosure

2021-03-2219:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.

CPENameOperatorVersion
nip6300_firmwareeq500r1c0-v
nip6300_firmwareeq500r1c20-v
nip6300_firmwareeq500r1c30-v
nip6600_firmwareeq500r1c0-v
nip6600_firmwareeq500r1c20-v
nip6600_firmwareeq500r1c30-v
secospace_usg6300_firmwareeq500r1c0-v
secospace_usg6300_firmwareeq500r1c20-v
secospace_usg6300_firmwareeq500r1c30-v
secospace_usg6500_firmwareeq500r1c0-v

Name	Operator	Version
nip6300_firmware	eq	500r1c0-v
nip6300_firmware	eq	500r1c20-v
nip6300_firmware	eq	500r1c30-v
nip6600_firmware	eq	500r1c0-v
nip6600_firmware	eq	500r1c20-v
nip6600_firmware	eq	500r1c30-v
secospace_usg6300_firmware	eq	500r1c0-v
secospace_usg6300_firmware	eq	500r1c20-v
secospace_usg6300_firmware	eq	500r1c30-v
secospace_usg6500_firmware	eq	500r1c0-v