CVE-2020-9201

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-24 · updated 2026-06-17
Weakness: CWE-125

Description

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.

Affected products

Huawei Nip6800 Firmware: v500r001c30, v500r001c60spc500, v500r005c00
Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00
Huawei USG9500: v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en

Get alerted when CVE-2020-9201 or the next vulnerability affects your stack