CVE-2020-9101 describes an out-of-bounds write vulnerability in various Huawei IPS Module, NGFW Module, Secospace USG6300/6500/6600, and USG9500 products. An unauthenticated attacker can exploit this by sending specially crafted malformed packets, leading to insufficient packet validation and causing the affected product's process to reboot. With a CVSS score of 6.5 (Medium), this vulnerability is network-adjacent (AV:A) and requires no user interaction (UI:N), but its primary impact is a denial of service (A:H) due to the process reboot. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
v500r005c00CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r005c00:*:*:*:*:*:*:* | ||
v500r005c10CPE matchmatch criteria | cpe:2.3:o:huawei:ips_module_firmware:v500r005c10:*:*:*:*:*:*:* | ||
v500r005c00CPE matchmatch criteria | cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00:*:*:*:*:*:*:* | ||
v500r005c10CPE matchmatch criteria | cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c10:*:*:*:*:*:*:* | ||
v500r001c30CPE matchmatch criteria | cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.