Huawei Secospace USG6500 Firmware vulnerabilities

67 CVEs affecting Huawei Secospace USG6500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1824, published 2024-12-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4576, published 2016-05-23. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and…
CVE-2017-15332, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15331, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15348, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500…
CVE-2017-17296, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17166, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00,…
CVE-2017-17257, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17256, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2016-8781, published 2017-04-02. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500 with software V500R001C20, Secospace USG6600 with software V500R001C20 and V500R001C20SPC200PWE allow…
CVE-2017-17252, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…

Latest

CVE-2020-1824, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1823, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1822, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1821, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1820, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1819, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1818, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2021-22356, published 2021-11-23. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages…
CVE-2021-22341, published 2021-06-29. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations.…
CVE-2021-22411, published 2021-05-27. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal…