{"id":"CVE-2020-9201","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-9201","generatedAt":"2026-10-27T21:18:07.487Z","title":"There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500.","description":"There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.","published":"2020-12-24T16:15:16.000Z","lastModified":"2026-06-17T03:27:34.000Z","status":"Modified","sourceIdentifier":"psirt@huawei.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-125"],"affected":["huawei/nip6800 firmware","huawei/secospace usg6600 firmware","huawei/usg9500 firmware"],"epss":{"score":0.00324,"percentile":0.2521,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en","tags":["Vendor Advisory"],"source":"psirt@huawei.com"},{"url":"https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-9201","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}