Read the docs
TI-2020-01790 Aliases CVE-2020-1858GHSA-28j5-v67p-rr85

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100…

Priority LOW 34Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.

Why it matters now

EPSS 0.00767 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiNIP6800V500R001C30; V500R001C60SPC500; V500R005C00SPC100—No fix listedCNA
HuaweiSecospace USG6600V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100—No fix listedCNA
HuaweiUSG9500V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100—No fix listedCNA
  • NIP6800 VendorHuawei Affected V500R001C30; V500R001C60SPC500; V500R005C00SPC100 Fixed in — No fix listed CNA
  • Secospace USG6600 VendorHuawei Affected V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100 Fixed in — No fix listed CNA
  • USG9500 VendorHuawei Affected V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100 Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:huawei:nip6800_firmware:v500r001c30:*:*:*:*:*:*:*v500r001c30VulnerableHuawei
cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*v500r001c60spc500VulnerableHuawei
cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*v500r005c00spc100VulnerableHuawei
cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*v500r001c30spc200VulnerableHuawei
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*v500r001c30spc600VulnerableHuawei
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*v500r001c60spc500VulnerableHuawei
cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*v500r005c00spc100VulnerableHuawei
cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*v500r001c30spc200VulnerableHuawei
  • cpe:2.3:o:huawei:nip6800_firmware:v500r001c30:*:*:*:*:*:*:* Versions v500r001c30 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:* Versions v500r001c60spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:* Versions v500r005c00spc100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:* Versions v500r001c30spc200 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:* Versions v500r001c30spc600 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:* Versions v500r001c60spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:* Versions v500r005c00spc100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:* Versions v500r001c30spc200 Vulnerable ·Huawei
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc600:*:*:*:*:*:*:*v500r001c30spc600VulnerableHuawei
cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*v500r001c60spc500VulnerableHuawei
cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc100:*:*:*:*:*:*:*v500r005c00spc100VulnerableHuawei
cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc600:*:*:*:*:*:*:* Versions v500r001c30spc600 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:* Versions v500r001c60spc500 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc100:*:*:*:*:*:*:* Versions v500r005c00spc100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1858
  2. 2026-10-03 Alias added: GHSA-28j5-v67p-rr85

References

Advisory 2

  • TI-2020-07310 Improper authentication in IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace… CVSS 3.1CRITICAL 9.8
  • TI-2019-03686 Out-of-bounds read in AP2000;IPS Module;NGFW… CVSS 3.1HIGH 8.6
  • TI-2019-14007 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
  • TI-2019-14006 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
  • TI-2019-14005 Memory corruption in Huawei AR120-S CVSS 3.1HIGH 7.5
  • TI-2017-12652 Improper input validation in Huawei AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160… CVSS 3.0HIGH 7.5
See all 58 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences