HIGH🇵🇱 Wersja polska

CVE-2019-19417

CVSS 7.5v3.1pub. 2020-07-08upd. 2024-11-21

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Huawei Ar1200

    HW
    Huawei
    all versions

  • Huawei Ar1200 Firmware

    OS
    Huawei
    v200r006c10v200r006c13v200r007c00v200r007c01v200r007c02v200r008c20v200r008c30

  • Huawei Ar1200 S

    HW
    Huawei
    all versions

  • Huawei Ar1200 S Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c30

  • Huawei Ar120 S

    HW
    Huawei
    all versions

  • Huawei Ar120 S Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c30

  • Huawei Ar150

    HW
    Huawei
    all versions

  • Huawei Ar150 Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r007c01v200r007c02v200r008c20v200r008c30

  • Huawei Ar150 S

    HW
    Huawei
    all versions

  • Huawei Ar150 S Firmware

    OS
    Huawei
    v200r006c10spc300v200r007c00v200r008c20v200r008c30

  • Huawei Ar160

    HW
    Huawei
    all versions

  • Huawei Ar160 Firmware

    OS
    Huawei
    v200r006c10v200r006c12v200r007c00v200r007c01v200r007c02v200r008c20v200r008c30

  • Huawei Ar200

    HW
    Huawei
    all versions

  • Huawei Ar200 Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r007c01v200r008c20v200r008c30

  • Huawei Ar200 S

    HW
    Huawei
    all versions

  • Huawei Ar200 S Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c30

  • Huawei Ar2200

    HW
    Huawei
    all versions

  • Huawei Ar2200 Firmware

    OS
    Huawei
    v200r006c10v200r006c13v200r006c16pwev200r007c00v200r007c01v200r007c02v200r008c20v200r008c30

  • Huawei Ar2200 S

    HW
    Huawei
    all versions

  • Huawei Ar2200 S Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c30

  • Huawei Ar3200

    HW
    Huawei
    all versions

  • Huawei Ar3200 Firmware

    OS
    Huawei
    v200r006c10v200r006c11v200r007c00v200r007c01v200r007c02v200r008c00v200r008c10v200r008c20v200r008c30

  • Huawei Ar3600

    HW
    Huawei
    all versions

  • Huawei Ar3600 Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r007c01v200r008c20

  • Huawei Ar510

    HW
    Huawei
    all versions

  • Huawei Ar510 Firmware

    OS
    Huawei
    v200r006c10v200r006c12v200r006c13v200r006c15v200r006c16v200r006c17v200r007c00spc180tv200r007c00spc600v200r007c00spc900v200r007c00spcb00v200r008c20v200r008c30

  • Huawei Dp300

    HW
    Huawei
    all versions

  • Huawei Dp300 Firmware

    OS
    Huawei
    v500r002c00

  • Huawei Ips Module Firmware

    OS
    Huawei
    v100r001c10v100r001c20v100r001c30v500r001c00v500r001c20v500r001c30v500r001c50
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2020-9099CRITICAL9.8PL ✓same product

Huawei IPS/NGFW/NIP/USG — obejście uwierzytelnienia (Auth Bypass)

CVE-2020-9068CRITICAL9.8PL ✓same product

Nieprawidłowe uwierzytelnienie w Huawei AR3200 — obejście autoryzacji

CVE-2017-17301CRITICAL9.8PL ✓same product

Słaba kryptografia w produktach Huawei — fałszowanie certyfikatów RSA

CVE-2016-6206CRITICAL9.8PL ✓same product

RCE/DoS w routerach Huawei AR3200 poprzez spreparowany pakiet

CVE-2016-4576CRITICAL9.8PL ✓same product

Buffer overflow w module ASPF urządzeń Huawei — RCE i DoS