huawei usg9500 firmware

Name: huawei usg9500 firmware
Brand: huawei

productUS

cpe:2.3:o:huawei:usg9500_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical38high37medium4low

updated 2026-10-28

vulnerabilities (81)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-4576US	critical9.8	2.38% (84th)	—	no fix	2016-05-23	= v500r001c00
CVE-2017-15332US	medium5.3	1.53% (75th)	—	no fix	2018-02-15	4 versions
CVE-2017-15331US	medium5.3	1.53% (75th)	—	no fix	2018-02-15	4 versions
CVE-2017-15348US	high7.5	1.31% (71st)	—	no fix	2018-02-15	= v500r001c00
CVE-2017-8167US	high7.5	1.29% (70th)	—	no fix	2017-11-22	= v500r001c50
CVE-2017-17296US	medium5.3	1.26% (70th)	—	no fix	2018-02-15	4 versions
CVE-2017-17257US	high7.5	1.26% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17256US	high7.5	1.26% (69th)	—	no fix	2018-04-24	4 versions
CVE-2019-19411US	low3.7	1.24% (69th)	—	no fix	2020-01-21	6 versions
CVE-2017-17252US	medium5.3	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17251US	medium5.3	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17258US	high7.5	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17255US	high7.5	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17254US	high7.5	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17253US	high7.5	1.22% (69th)	—	no fix	2018-04-24	4 versions
CVE-2017-17297US	medium5.3	1.22% (69th)	—	no fix	2018-02-15	4 versions
CVE-2017-17295US	medium5.3	1.22% (69th)	—	no fix	2018-02-15	4 versions
CVE-2017-15350US	medium5.3	1.22% (69th)	—	no fix	2018-02-15	4 versions
CVE-2016-4577US	high7.5	1.00% (63rd)	—	no fix	2016-05-23	= v500r001c00
CVE-2017-17157US	high7.5	0.91% (60th)	—	no fix	2018-02-15	17 versions
CVE-2017-17156US	high7.5	0.91% (60th)	—	no fix	2018-02-15	17 versions
CVE-2017-17155US	high7.5	0.91% (60th)	—	no fix	2018-02-15	17 versions
CVE-2017-17154US	high7.5	0.91% (60th)	—	no fix	2018-02-15	17 versions
CVE-2017-17153US	high7.5	0.91% (60th)	—	no fix	2018-02-15	17 versions
CVE-2017-15336US	medium5.3	0.89% (59th)	—	no fix	2018-02-15	3 versions
CVE-2017-15335US	medium5.3	0.89% (59th)	—	no fix	2018-02-15	3 versions
CVE-2017-15334US	medium5.3	0.89% (59th)	—	no fix	2018-02-15	3 versions
CVE-2019-19417US	high7.5	0.88% (59th)	—	no fix	2020-07-08	6 versions
CVE-2019-19416US	high7.5	0.88% (59th)	—	no fix	2020-07-08	6 versions
CVE-2019-19415US	high7.5	0.88% (59th)	—	no fix	2020-07-08	6 versions
CVE-2020-9099US	critical9.8	0.88% (59th)	—	no fix	2020-06-08	9 versions
CVE-2020-1816US	high7.5	0.86% (58th)	—	no fix	2020-02-18	4 versions
CVE-2021-22312US	medium6.5	0.85% (58th)	—	no fix	2021-04-08	5 versions
CVE-2020-1883US	medium4.9	0.80% (56th)	—	no fix	2020-06-05	3 versions
CVE-2021-22309US	high7.5OT elevated	0.79% (56th)	—	no fix	2021-03-22	3 versions
CVE-2020-1881US	high7.5	0.79% (56th)	—	no fix	2020-02-28	2 versions
CVE-2020-1873US	high7.5	0.77% (55th)	—	no fix	2020-02-28	4 versions
CVE-2020-1858US	high7.5	0.77% (55th)	—	no fix	2020-02-17	4 versions
CVE-2017-17152US	medium5.9	0.77% (55th)	—	no fix	2018-02-15	17 versions
CVE-2020-1856US	high7.5	0.76% (55th)	—	no fix	2020-02-17	3 versions
CVE-2020-1876US	high7.5	0.76% (55th)	—	no fix	2020-02-28	4 versions
CVE-2020-9213US	high7.5	0.75% (55th)	—	no fix	2021-03-22	3 versions
CVE-2020-1847US	high7.5	0.74% (55th)	—	no fix	2020-11-13	2 versions
CVE-2020-1829US	high7.5	0.74% (55th)	—	no fix	2020-02-17	3 versions
CVE-2020-1827US	high7.5	0.74% (55th)	—	no fix	2020-02-17	4 versions
CVE-2020-1828US	high7.5	0.74% (55th)	—	no fix	2020-02-17	4 versions
CVE-2021-22321US	medium5.3	0.74% (54th)	—	no fix	2021-03-22	2 versions
CVE-2020-1830US	medium5.3	0.73% (54th)	—	no fix	2020-02-18	4 versions
CVE-2020-1815US	high7.5	0.72% (54th)	—	no fix	2020-02-18	4 versions
CVE-2017-15339US	low3.7	0.70% (53rd)	—	no fix	2018-02-15	3 versions

showing 50 of 81

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer16 CVEs
CWE-20Improper Input Validation16 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-787Out-of-bounds Write8 CVEs
CWE-772Missing Release of Resource after Effective Lifetime6 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE81 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan