Huawei NIP6300 Firmware vulnerabilities

59 CVEs affecting Huawei NIP6300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1824, published 2024-12-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4576, published 2016-05-23. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and…
CVE-2017-15332, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15331, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15348, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500…
CVE-2017-17296, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17257, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17256, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17252, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17251, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17258, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…

Latest

CVE-2020-1824, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1823, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1822, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1821, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1820, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1819, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1818, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2021-22341, published 2021-06-29. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations.…
CVE-2021-22312, published 2021-04-08. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release…
CVE-2021-22321, published 2021-03-22. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious…