Lucene search

HuaweiCVE-2019-5274

HistoryDec 26, 2019 - 7:15 p.m.

CVE-2019-5274

2019-12-2619:15:11

CWE-835

huawei

web.nvd.nist.gov

usg9500

v500r001c30

v500r001c60

x.509

dos

denial of service

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products.

Affected configurations

Nvd

Vulners

Node

huaweiusg9500_firmwareMatchv500r001c30

huaweiusg9500_firmwareMatchv500r001c60

AND

huaweiusg9500Match-

VendorProductVersionCPE
huaweiusg9500_firmwarev500r001c30cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*
huaweiusg9500_firmwarev500r001c60cpe:2.3:o:huawei:usg9500_firmware:v500r001c60:*:*:*:*:*:*:*
huaweiusg9500-cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	usg9500_firmware	v500r001c30	cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:::::::*
huawei	usg9500_firmware	v500r001c60	cpe:2.3:o:huawei:usg9500_firmware:v500r001c60:::::::*
huawei	usg9500	-	cpe:2.3:h:huawei:usg9500:-:::::::*

CNA Affected

[
  {
    "product": "USG9500",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V500R001C30"
      },
      {
        "status": "affected",
        "version": "V500R001C60"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2019-5274