Known vulnerabilities in USG9500
Vendor:
Huawei
Software:
USG9500
Software CPE:
cpe:2.3:h:huawei:usg9500:*:*:*:*:*:*:*:*
Website:
https://www.huawei.com
Total vulnerabilities:
43
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
V500R005C20SPC601
V500R005C20SPC500+V500R005SPH008
V500R005C20SCP500
V500R005C20SPC600
V500R005C20SPH302
V500R001C30SPC300
V500E005C00SPC200
V500R005C20
V500R005C10
V500R001C80
V500R005SPH007
V500R005C20SPC500
V500R005C00
V500R001C50
V500R001C20
V500R001C00
V300R001C20
V500R001SPH015
V300R001C01
V500R005C20SPC300
V600R007C00
V500R005C00SPC200
V500R005C00SPC100
V500R001C60SPC500
V500R001C30SPC600
V500R001C30SPC200
V500R001C30SPC100
V500R001C60
V500R001C30
Vulnerabilities (43)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU57581 - Memory corruption CVE-2021-37129 |
CWE-119 | Medium | V500R005C20SPC601 | 21.10.2021 |
SB2021102123 |
||
| #VU53790 - Exposure of sensitive information to an unauthorized actor CVE-2021-22342 |
CWE-200 | Low | V500R005C20SPC500+V500R005SPH008 | 04.06.2021 |
SB2021060401 |
||
| #VU53382 - Resource Management Errors CVE-2021-22360 |
CWE-399 | Low | V500R005C20SPC500 | 20.05.2021 |
SB2021052003 |
||
| #VU52995 - Memory corruption CVE-2021-22411 |
CWE-119 | Low | V500R005C20SPC500 | 10.05.2021 |
SB2021051006 |
||
| #VU50910 - Use After Free CVE-2021-22321 |
CWE-416 | Medium | V500R005C20SPC500 | 24.02.2021 |
SB2021022410 |
||
| #VU50647 - Missing release of memory after effective lifetime CVE-2021-22312 |
CWE-401 | Medium | V500R005C20SCP500 | 11.02.2021 |
SB2021021130 |
||
| #VU50646 - Improper input validation CVE-2020-9213 |
CWE-20 | Medium | V500R005C20SPC500 | 11.02.2021 |
SB2021021129 |
||
| #VU50288 - Exposure of sensitive information to an unauthorized actor CVE-2020-9212 |
CWE-200 | Medium | V500R005C20SPH302 | 03.02.2021 |
SB2021020322 |
||
| #VU50286 - Exposure of sensitive information to an unauthorized actor CVE-2021-22309 |
CWE-200 | Low | V500R005C20SPC300 | 03.02.2021 |
SB2021020324 |
||
| #VU50285 - Exposure of sensitive information to an unauthorized actor CVE-2021-22310 |
CWE-200 | Low | V500R005C20SPC500 | 03.02.2021 |
SB2021020325 |
||
| #VU49225 - Out-of-bounds read CVE-2020-1866 |
CWE-125 | Low | V500R005C20SPC300 | 04.01.2021 |
SB2021010404 |
||
| #VU48913 - Out-of-bounds read CVE-2020-9201 |
CWE-125 | Low | V500R005C20SPC300 | 10.12.2020 |
SB2020121012 |
||
| #VU48391 - Improper input validation CVE-2020-1847 |
CWE-20 | Medium | V500R005C00SPC200 | 12.11.2020 |
SB2020111207 |
||
| #VU48390 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-9127 |
CWE-78 | Low | V500E005C00SPC200 | 12.11.2020 |
SB2020111206 |
||
| #VU30118 - Memory corruption CVE-2020-9101 |
CWE-119 | Low | V500R005C20SPC500 | 16.07.2020 |
SB2020051120 |
||
| #VU27673 - Improper Authentication CVE-2020-9099 |
CWE-287 | Medium | V500R005SPH007, V500R005C20SPC500 | 11.05.2020 |
SB2020051120 |
||
| #VU25441 - Access of Uninitialized Pointer CVE-2020-1877 |
CWE-824 | Low | V500R005C20SPC300 | 19.02.2020 |
SB2020020515 |
||
| #VU25440 - Out-of-bounds read CVE-2020-1876 |
CWE-125 | Low | V500R005C20SPC300 | 19.02.2020 |
SB2020020515 |
||
| #VU25430 - Improper Access Control CVE-2020-1860 |
CWE-284 | Low | V500R005C20SPC300 | 19.02.2020 |
SB2020020515 |
||
| #VU25024 - Exposure of sensitive information to an unauthorized actor CVE-2020-1856 |
CWE-200 | Low | V500R005C20SPC300 | 07.02.2020 |
SB2020020708 |
Showing elements 1 - 20 out of 43