CVE-2020-1816

Vulnerability

A denial of service (DoS) vulnerability exists in Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00. The issue stems from improper processing of specific IPSEC packets, which can be triggered without any special configuration or authentication [1].

Exploitation

An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted IPSEC packets to the affected device. No user interaction or prior access is required. The attacker only needs network reachability to the target device's IPSec interface [1].

Impact

Successful exploitation causes the IPSec function of the device to become abnormal, resulting in a denial of service condition. The attack does not lead to information disclosure, privilege escalation, or code execution; it solely disrupts IPSec processing [1].

Mitigation

Huawei has released software updates to fix this vulnerability. The resolved version is V500R005C20SPC300 for all affected products. The security advisory was published on 2020-02-12 [1]. No workarounds are documented. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.