Huawei USG6000V Firmware vulnerabilities

21 CVEs affecting Huawei USG6000V Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1824, published 2024-12-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17257, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17256, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17252, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17251, published 2018-04-24. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17258, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17255, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17254, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17253, published 2018-04-24. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2020-1863, published 2020-03-12. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote,…
CVE-2019-5254, published 2019-12-13. High severity, CVSS 8.6. EPSS: 0.7% chance of exploitation in the next 30 days. Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace…

Latest

CVE-2020-1824, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1823, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1822, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1821, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1820, published 2024-12-28. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1819, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2020-1818, published 2024-12-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (COPS) protocol of some Huawei products. The specific decoding function may occur…
CVE-2019-5258, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace…
CVE-2019-5257, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to…