VULNERABILITY INTELLIGENCE
CVE-2020-9201
CVSS score6.5 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2020-12-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.
Weakness classification
- CWE-125: Out-of-bounds Read
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory