CVE-2020-9099: Huawei Ips Module Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

Affected products

  • Huawei Ips Module Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei Ngfw Module Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r002c00 only; …
  • Huawei NIP6300 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei NIP6600 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei NIP6800 Firmware: version v500r001c60 only; version v500r001c80 only; version v500r005c00 only; version v500r005c10 only; version v500r005c20 only
  • Huawei Secospace USG6300 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei Secospace USG6500 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei Secospace USG6600 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …
  • Huawei USG9500 Firmware: version v500r001c00 only; version v500r001c20 only; version v500r001c30 only; version v500r001c50 only; version v500r001c60 only; version v500r001c80 only; …

Published 2020-06-08. Last modified 2026-06-17.