Approved changes feed: RSS · Atom

cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60:*:*:*:*:*:*:*

part: o version: v500r001c60 update: *

VendorHuawei (1cc7ae8f-602e-5c48-b475-b8c42c69e952)
ProductSecospace Usg6500 Firmware (c143f2c1-3b50-5fe6-8349-ff4aa3f67869)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-22321 vulnerable 2026-06-08 05:30:00.377514 Details available
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
Published: 2021-03-22T19:03:52.000Z
Updated: 2024-08-03T18:37:18.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9213 vulnerable 2026-06-08 05:27:20.936619 Details available
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.
Published: 2021-03-22T17:39:26.000Z
Updated: 2024-08-04T10:19:20.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9127 vulnerable 2026-06-08 05:27:20.830853 Details available
Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
Published: 2020-11-13T14:46:52.000Z
Updated: 2024-08-04T10:19:20.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9101 vulnerable 2026-06-08 05:27:20.737728 Details available
There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected product versions include: IPS Module versions V500R005C00, V500R005C10; NGFW Module versions V500R005C00, V500R005C10; Secospace USG6300 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; Secospace USG6600 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10; USG9500 versions V500R001C30, V500R001C60, V500R005C00, V500R005C10
Published: 2020-07-17T23:05:27.000Z
Updated: 2024-08-04T10:19:19.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9099 vulnerable 2026-06-08 05:27:20.712866 Details available
Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.
Published: 2020-06-08T13:55:12.000Z
Updated: 2024-08-04T10:19:20.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1856 vulnerable 2026-06-08 05:21:03.302106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1847 vulnerable 2026-06-08 05:21:03.282445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1824 vulnerable 2026-06-08 05:21:03.190623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1823 vulnerable 2026-06-08 05:21:03.188529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1822 vulnerable 2026-06-08 05:21:03.186737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1821 vulnerable 2026-06-08 05:21:03.184752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1820 vulnerable 2026-06-08 05:21:03.182665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1819 vulnerable 2026-06-08 05:21:03.180691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1818 vulnerable 2026-06-08 05:21:03.175088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.