CVE-2018-7994 Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 hav...
HighCVSS 7.5
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Huawei ips module | = v500r001c50 | No fix listed |
| Huawei ngfw module | = v500r001c50 | No fix listed |
| Huawei ngfw module | = v500r002c10 | No fix listed |
| Huawei nip6300 | = v500r001c50 | No fix listed |
| Huawei nip6600 | = v500r001c50 | No fix listed |
| Huawei nip6800 | = v500r001c50 | No fix listed |
| Huawei secospace usg6600 | = v500r001c50 | No fix listed |
| Huawei usg9500 | = v500r001c50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = IPS Module V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = NGFW Module V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = V500R002C10 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = NIP6300 V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = NIP6600 V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = NIP6800 V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = Secospace USG6600 V500R001C50 | No fix listed |
| Huawei Technologies Co., Ltd. NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 | = USG9500 V500R001C50 | No fix listed |
References
- www.huawei.com vendor-advisory