Design/Logic Flaw

2021-03-2220:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

39.7%

JSON

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.

CPENameOperatorVersion
nip6300_firmwareeq500r1c30-v
nip6300_firmwareeq500r1c60-v
nip6600_firmwareeq500r1c30-v
nip6800_firmwareeq500r1c60-v
s12700_firmwareeq200r7c1-v
s12700_firmwareeq200r7c1b102-v
s12700_firmwareeq200r8c0-v
s12700_firmwareeq200r10c0-v
s12700_firmwareeq200r10c0spc300-v
s12700_firmwareeq200r11c0-v

Name	Operator	Version
nip6300_firmware	eq	500r1c30-v
nip6300_firmware	eq	500r1c60-v
nip6600_firmware	eq	500r1c30-v
nip6800_firmware	eq	500r1c60-v
s12700_firmware	eq	200r7c1-v
s12700_firmware	eq	200r7c1b102-v
s12700_firmware	eq	200r8c0-v
s12700_firmware	eq	200r10c0-v
s12700_firmware	eq	200r10c0spc300-v
s12700_firmware	eq	200r11c0-v