Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-7994

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500

  • IPS Module V500R001C50affected
  • NGFW Module V500R001C50affected
  • V500R002C10affected
  • NIP6300 V500R001C50affected
  • NIP6600 V500R001C50affected
  • NIP6800 V500R001C50affected
  • Secospace USG6600 V500R001C50affected
  • USG9500 V500R001C50affected

References