« Volver al listado

CVE-2020-9075

Estado: ModificadaMedia (6.5)—

Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Huawei — Secospace Usg6300 FirmwareHuawei — Secospace Usg6600 FirmwareHuawei — Usg6300e Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9075",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Secospace USG6300;USG6300E",
          "versions": [
            {
              "status": "affected",
              "version": "V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10"
            },
            {
              "status": "affected",
              "version": "V600R006C00"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-06-15T15:15:09.710",
  "references": [
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage."
    },
    {
      "lang": "es",
      "value": "Los productos Huawei Secospace USG6300; USG6300E con versiones de V500R001C30, V500R001C50, V500R001C60, V500R001C80, V500R005C00, V500R005C10; V600R006C00 presentan una vulnerabilidad de verificación de entrada insuficiente. Un atacante con privilegios limitados puede explotar esta vulnerabilidad para acceder a un directorio específico. Una explotación con éxito de esta vulnerabilidad puede conllevar a un filtrado de información"
    }
  ],
  "lastModified": "2026-06-17T03:27:27.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68E9D32D-46F1-495B-BF83-308DFF8822F8"
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A59F0A0-4138-4BA3-887D-5A4AE7B2F816"
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
            },
            {
              "criteria": "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c80:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0F5C89A-DA13-46D1-BDCF-0BD94F7B7861"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:usg6300e_firmware:v600r006c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5483A7D-7FC0-4F60-BEB0-AFC1CCC70C8C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:usg6300e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4DC37EF5-D8A8-4ABA-9CB6-8ED2B6E54EEF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}