CVE:CVE-2020-1856
CNNVD:CNNVD-202002-412
多款Huawei产品中存在信息泄露漏洞。攻击者可通过向受影响设备发送请求数据包利用该漏洞造成信息泄露。以下产品及版本受到影响：NGFW Module V500R001C30版本，NGFW Module V500R001C60版本，NGFW Module V500R005C00版本；NIP6300 V500R001C30版本，NIP6300 V500R001C60版本，NIP6300 V500R005C00版本；NIP6600 V500R001C30版本，NIP6600 V500R001C60版本，NIP6600 V500R005C00版本；Secospace USG6500  
V500R001C30版本，Secospace USG6500 V500R001C60版本，Secospace USG6500 V500R005C00版本；Secospace USG6600 V500R001C30版本，Secospace USG6600 V500R001C60版本，Secospace USG6600 V500R005C00版本，USG9500 V500R001C30版本，USG9500 V500R001C60版本，USG9500 V500R005C00版本。
solution:Upgrade huawei ngfw_module_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00; Upgrade huawei nip6300_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00; Upgrade huawei nip6600_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00; Upgrade huawei secospace_usg6500_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00; Upgrade huawei secospace_usg6600_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00; Upgrade huawei usg9500_firmware to a higher version than v500r001c30,v500r001c60,v500r005c00,and avoid the version v500r001c30,v500r001c60,v500r005c00