HIGH🇵🇱 Wersja polska

CVE-2019-5304

CVSS 7.5v3.1pub. 2020-01-03upd. 2024-11-21

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Huawei Ar1200

    HW
    Huawei
    all versions

  • Huawei Ar1200 Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar1200 S

    HW
    Huawei
    all versions

  • Huawei Ar1200 S Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar120 S

    HW
    Huawei
    all versions

  • Huawei Ar120 S Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar150

    HW
    Huawei
    all versions

  • Huawei Ar150 Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar150 S

    HW
    Huawei
    all versions

  • Huawei Ar150 S Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar160

    HW
    Huawei
    all versions

  • Huawei Ar160 Firmware

    OS
    Huawei
    v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar200

    HW
    Huawei
    all versions

  • Huawei Ar200 Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar200 S

    HW
    Huawei
    all versions

  • Huawei Ar200 S Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar2200

    HW
    Huawei
    all versions

  • Huawei Ar2200 Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar2200 S

    HW
    Huawei
    all versions

  • Huawei Ar2200 S Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r008c20v200r008c50

  • Huawei Ar3200

    HW
    Huawei
    all versions

  • Huawei Ar3200 Firmware

    OS
    Huawei
    v200r003c01v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ar3600

    HW
    Huawei
    all versions

  • Huawei Ar3600 Firmware

    OS
    Huawei
    v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ips Module

    HW
    Huawei
    all versions

  • Huawei Ips Module Firmware

    OS
    Huawei
    v500r001c20v500r001c30

  • Huawei Netengine16ex

    HW
    Huawei
    all versions

  • Huawei Netengine16ex Firmware

    OS
    Huawei
    v200r005c20v200r006c10v200r007c00v200r008c20v200r008c50

  • Huawei Ngfw Module

    HW
    Huawei
    all versions

  • Huawei Ngfw Module Firmware

    OS
    Huawei
    v500r001c20v500r002c00
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-9099CRITICAL9.8PL ✓same product

Huawei IPS/NGFW/NIP/USG — obejście uwierzytelnienia (Auth Bypass)

CVE-2020-9068CRITICAL9.8PL ✓same product

Nieprawidłowe uwierzytelnienie w Huawei AR3200 — obejście autoryzacji

CVE-2017-17301CRITICAL9.8PL ✓same product

Słaba kryptografia w produktach Huawei — fałszowanie certyfikatów RSA

CVE-2016-6206CRITICAL9.8PL ✓same product

RCE/DoS w routerach Huawei AR3200 poprzez spreparowany pakiet

CVE-2016-4576CRITICAL9.8PL ✓same product

Buffer overflow w module ASPF urządzeń Huawei — RCE i DoS