CVE-2020-9201

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Dec 24, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-92024.4There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage o CVE-2020-92033.3There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing CVE-2020-92054.9There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some op CVE-2020-92066.7The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit CVE-2020-92077.8There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file pr CVE-2020-92086.5There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers witho CVE-2020-92096.7There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not a CVE-2020-92106.8There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scen CVE-2020-92117.2There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can e CVE-2020-92126.5There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The at CVE-2020-92137.5There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an a CVE-2020-92227.8There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need