GCVE - cpe:2.3:a:huawei:usg9500:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:huawei:usg9500:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Huawei (`1cc7ae8f-602e-5c48-b475-b8c42c69e952`)
Product	Usg9500 (`ee6f151f-fbd4-5720-8135-d2e152416d5e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-9101`	vulnerable	2026-06-08 05:27:20.737464	Details available There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V500R005C10; NGFW Module versions V500R005C00, V500R005C10; Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10 Published: 2020-07-17T23:05:27.000Z Updated: 2024-08-04T10:19:19.829Z Open on db.gcve.eu Reference links https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-01-outofboundswrite-en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1858`	vulnerable	2026-06-08 05:21:03.303716	Details available Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service. Published: 2020-02-17T19:30:02.000Z Updated: 2024-08-04T06:53:58.976Z Open on db.gcve.eu Reference links http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1857`	vulnerable	2026-06-08 05:21:03.302805	Details available Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authenticated attacker can exploit this vulnerability through a series of operations. Successful exploitation may cause information leakage. Published: 2020-02-17T20:01:03.000Z Updated: 2024-08-04T06:53:58.616Z Open on db.gcve.eu Reference links http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-leakage-en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1829`	vulnerable	2026-06-08 05:21:03.229664	Details available Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service. Published: 2020-02-17T20:16:01.000Z Updated: 2024-08-04T06:46:31.029Z Open on db.gcve.eu Reference links http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-ipsec-en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1828`	vulnerable	2026-06-08 05:21:03.228674	Details available Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service. Published: 2020-02-17T19:49:51.000Z Updated: 2024-08-04T06:46:30.955Z Open on db.gcve.eu Reference links http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-01-ipsec-en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5275`	vulnerable	2026-06-08 05:13:58.561341	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5274`	vulnerable	2026-06-08 05:13:58.560856	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5273`	vulnerable	2026-06-08 05:13:58.560486	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5272`	vulnerable	2026-06-08 05:13:58.557750	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19417`	vulnerable	2026-06-08 05:13:22.782361	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19416`	vulnerable	2026-06-08 05:13:22.747566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19415`	vulnerable	2026-06-08 05:13:22.428000	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.