CVE-2018-7994: Huawei Ips Module

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

Affected products

• Huawei Ips Module: version v500r001c50 only
• Huawei Ngfw Module: version v500r001c50 only; version v500r002c10 only
• Huawei NIP6300: version v500r001c50 only
• Huawei NIP6600: version v500r001c50 only
• Huawei NIP6800: version v500r001c50 only
• Huawei Secospace USG6600: version v500r001c50 only
• Huawei USG9500: version v500r001c50 only

Published 2018-07-31. Last modified 2026-06-17.