CVE:CVE-2020-9127
CNNVD:CNNVD-202011-937
Huawei NIP6800等都是中国华为（Huawei）公司的产品。Huawei NIP6800是一套入侵防御系统。Huawei NIP6300是一款主要适用于企业、学校、运行商、IDC的入侵防御系统。Huawei NIP6600是一款主要适用于企业、学校、运行商、IDC的入侵防御系统。
华为部分产品存在命令注入漏洞。该漏洞源于输入校验不充分，一个拥有高权限的攻击者可以在受影响产品的某些文件中注入一些恶意代码。以下产品及版本受到影响：Huawei NIP6300,Huawei NIP6600,Huawei Secospace USG6300,Huawei Secospace USG6500,Huawei Secospace USG6600,Huawei USG9500
solution:Upgrade huawei nip6300_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60; Upgrade huawei nip6600_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60; Upgrade huawei secospace_usg6300_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60; Upgrade huawei secospace_usg6500_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60; Upgrade huawei secospace_usg6600_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60; Upgrade huawei usg9500_firmware to a higher version than v500r001c30,v500r001c60,and avoid the version v500r001c30,v500r001c60