What’s Vulnerable › Vulnerabilities

CVE-2020-9213

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-22 · updated 2026-06-17

Description

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.

Affected products

• Huawei Ngfw Module Firmware: v500r005c00
• Huawei Nip6300 Firmware: v500r001c30, v500r001c60, v500r005c00
• Huawei Nip6600 Firmware: v500r001c30, v500r001c60, v500r005c00
• Huawei Nip6800 Firmware: v500r001c60, v500r005c00
• Huawei Secospace Usg6300 Firmware: v500r001c30, v500r001c60, v500r005c00
• Huawei Secospace Usg6500 Firmware: v500r001c30, v500r001c60, v500r005c00
• Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c30, v500r001c60, v500r005c00
• Huawei USG9500: v500r001c30, v500r001c60, v500r005c00

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en

Get alerted when CVE-2020-9213 or the next vulnerability affects your stack