CVE-2020-9099

Published: Jun 8, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.

Affected (80)

Products: Huawei: Ips Module Firmware, Ngfw Module Firmware, Nip6300 Firmware, Nip6600 Firmware, Nip6800 Firmware, Secospace Usg6300 Firmware, Secospace Usg6500 Firmware, Secospace Usg6600 Firmware, Usg9500 Firmware

9 products

Secospace Usg6300 Firmware

Secospace Usg6500 Firmware

Secospace Usg6600 Firmware

Usg9500 Firmware

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ips Module Firmware	Version v500r001c00
Huawei Ips Module Firmware	Version v500r001c20
Huawei Ips Module Firmware	Version v500r001c30
Huawei Ips Module Firmware	Version v500r001c50
Huawei Ips Module Firmware	Version v500r001c60
Huawei Ips Module Firmware	Version v500r001c80
Huawei Ips Module Firmware	Version v500r005c00
Huawei Ips Module Firmware	Version v500r005c10
Huawei Ips Module Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Ips Module	All versions

Configuration B

12 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ngfw Module Firmware	Version v500r001c00
Huawei Ngfw Module Firmware	Version v500r001c20
Huawei Ngfw Module Firmware	Version v500r001c30
Huawei Ngfw Module Firmware	Version v500r001c50
Huawei Ngfw Module Firmware	Version v500r001c60
Huawei Ngfw Module Firmware	Version v500r002c00
Huawei Ngfw Module Firmware	Version v500r002c10
Huawei Ngfw Module Firmware	Version v500r002c20
Huawei Ngfw Module Firmware	Version v500r002c30
Huawei Ngfw Module Firmware	Version v500r005c00
Huawei Ngfw Module Firmware	Version v500r005c10
Huawei Ngfw Module Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Ngfw Module	All versions

Configuration C

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6300 Firmware	Version v500r001c00
Huawei Nip6300 Firmware	Version v500r001c20
Huawei Nip6300 Firmware	Version v500r001c30
Huawei Nip6300 Firmware	Version v500r001c50
Huawei Nip6300 Firmware	Version v500r001c60
Huawei Nip6300 Firmware	Version v500r001c80
Huawei Nip6300 Firmware	Version v500r005c00
Huawei Nip6300 Firmware	Version v500r005c10
Huawei Nip6300 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Nip6300	All versions

Configuration D

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6600 Firmware	Version v500r001c00
Huawei Nip6600 Firmware	Version v500r001c20
Huawei Nip6600 Firmware	Version v500r001c30
Huawei Nip6600 Firmware	Version v500r001c50
Huawei Nip6600 Firmware	Version v500r001c60
Huawei Nip6600 Firmware	Version v500r001c80
Huawei Nip6600 Firmware	Version v500r005c00
Huawei Nip6600 Firmware	Version v500r005c10
Huawei Nip6600 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Nip6600	All versions

Configuration E

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Nip6800 Firmware	Version v500r001c60
Huawei Nip6800 Firmware	Version v500r001c80
Huawei Nip6800 Firmware	Version v500r005c00
Huawei Nip6800 Firmware	Version v500r005c10
Huawei Nip6800 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Nip6800	All versions

Configuration F

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6300 Firmware	Version v500r001c00
Huawei Secospace Usg6300 Firmware	Version v500r001c20
Huawei Secospace Usg6300 Firmware	Version v500r001c30
Huawei Secospace Usg6300 Firmware	Version v500r001c50
Huawei Secospace Usg6300 Firmware	Version v500r001c60
Huawei Secospace Usg6300 Firmware	Version v500r001c80
Huawei Secospace Usg6300 Firmware	Version v500r005c00
Huawei Secospace Usg6300 Firmware	Version v500r005c10
Huawei Secospace Usg6300 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Secospace Usg6300	All versions

Configuration G

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6500 Firmware	Version v500r001c00
Huawei Secospace Usg6500 Firmware	Version v500r001c20
Huawei Secospace Usg6500 Firmware	Version v500r001c30
Huawei Secospace Usg6500 Firmware	Version v500r001c50
Huawei Secospace Usg6500 Firmware	Version v500r001c60
Huawei Secospace Usg6500 Firmware	Version v500r001c80
Huawei Secospace Usg6500 Firmware	Version v500r005c00
Huawei Secospace Usg6500 Firmware	Version v500r005c10
Huawei Secospace Usg6500 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Secospace Usg6500	All versions

Configuration H

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Secospace Usg6600 Firmware	Version v500r001c00
Huawei Secospace Usg6600 Firmware	Version v500r001c20
Huawei Secospace Usg6600 Firmware	Version v500r001c30
Huawei Secospace Usg6600 Firmware	Version v500r001c50
Huawei Secospace Usg6600 Firmware	Version v500r001c60
Huawei Secospace Usg6600 Firmware	Version v500r001c80
Huawei Secospace Usg6600 Firmware	Version v500r005c00
Huawei Secospace Usg6600 Firmware	Version v500r005c10
Huawei Secospace Usg6600 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Secospace Usg6600	All versions

Configuration I

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Usg9500 Firmware	Version v500r001c00
Huawei Usg9500 Firmware	Version v500r001c20
Huawei Usg9500 Firmware	Version v500r001c30
Huawei Usg9500 Firmware	Version v500r001c50
Huawei Usg9500 Firmware	Version v500r001c60
Huawei Usg9500 Firmware	Version v500r001c80
Huawei Usg9500 Firmware	Version v500r005c00
Huawei Usg9500 Firmware	Version v500r005c10
Huawei Usg9500 Firmware	Version v500r005c20

Running on/with	Platform Versions
Huawei Usg9500	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.