Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DH

Description

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a NIP6800;Secospace USG6600;USG9500

  • V500R001C30,V500R001C60SPC500,V500R005C00affected
  • V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00affected

References