Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Huawei Data Communication: Use After Free Vulnerability in Huawei Product (huawei-sa-20210210-01-uaf)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
There is a use-after-free vulnerability in Huawei products.
Insight
Insight
A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service.
Affected Software
Affected Software
NIP6300 versions V500R001C30 V500R001C60 NIP6600 versions V500R001C30 NIP6800 versions V500R001C60 S12700 versions V200R007C01 V200R007C01B102 V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 S1700 versions V200R009C00SPC200 V200R009C00SPC500 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 S2700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 S5700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 V200R011C10SPC100 S6700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 V200R011C10SPC100 S7700 versions V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 S9700 versions V200R007C01 V200R007C01B102 V200R008C00 V200R010C00 V200R010C00SPC300 V200R011C00 V200R011C00SPC100 V200R011C10 Secospace USG6300 versions V500R001C30 V500R001C60 Secospace USG6500 versions V500R001C30 V500R001C60 Secospace USG6600 versions V500R001C30 V500R001C60 USG9500 versions V500R001C30 V500R001C60
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
See the referenced vendor advisory for a solution.