Huawei Secospace Usg6500 Luki w zabezpieczeniach

Wersja

V500R001C20SPC100	4
V500R001C20SPC200	4
V500R001C20SPC101	2

Przeciwdziałanie

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	20

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	22

Wektor dostępu

Not Defined	0
Physical	0
Local	4
Adjacent	6
Network	12

Uwierzytelnianie

Not Defined	0
High	0
Low	20
None	2

Interakcja z użytkownikiem

Not Defined	0
Required	0
None	22

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	16
≤7	2
≤8	0
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	16
≤7	2
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	6
≤6	4
≤7	4
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	8
≤7	6
≤8	4
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	6
<10k	10
<25k	6
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	4
<2k	6
<5k	6
<10k	4
<25k	2
<50k	0
<100k	0
≥100k	0

Affected Versions (16): V500R001C00, V500R001C20, V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200, V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R002C00, V500R002C10, V500R002C20, V500R002C30, V500R005C00, V500R005C10, V500R005C20

Link to Product Website: https://www.huawei.com/

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2021-11-23	2.6	2.6	Huawei Secospace USG9500 weak encryption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-22356
2021-06-30	4.3	4.3	Huawei Secospace USG6600 denial of service	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-22341
2021-05-28	5.5	5.5	Huawei Secospace USG9500 memory corruption	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2021-22411
2021-04-09	4.3	4.3	Huawei Secospace USG9500 Message denial of service	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2021-22312
2021-03-23	5.4	5.4	Huawei Secospace USG9500 memory corruption	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2021-22321
2021-03-23	5.5	5.5	Huawei Secospace USG6600 Message denial of service	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-22320
2021-03-23	3.9	3.9	Huawei Secospace USG9500 information disclosure	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-22310
2021-03-23	5.5	5.5	Huawei Secospace SG9500 Packet denial of service	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-9213
2020-11-13	6.1	6.1	Huawei Secospace USG9500 injection.Affected privilege escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2020-9127
2020-11-13	5.9	5.6	Huawei Secospace USG6600 Protocol denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-1847