Lucene search

[email protected]CVE-2019-5304

HistoryJan 03, 2020 - 3:15 p.m.

CVE-2019-5304

2020-01-0315:15:00

CWE-120

[email protected]

web.nvd.nist.gov

huawei

buffer error

vulnerability

mpls

echo request

input validation

cve-2019-5304

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

58.6%

JSON

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

CPENameOperatorVersion
huawei:ar120-s_firmwarehuawei ar120-s firmwareeqv200r006c10
huawei:ar120-s_firmwarehuawei ar120-s firmwareeqv200r007c00
huawei:ar120-s_firmwarehuawei ar120-s firmwareeqv200r008c20
huawei:ar120-s_firmwarehuawei ar120-s firmwareeqv200r008c50
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r003c01
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r005c20
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r006c10
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r007c00
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r008c20
huawei:ar1200_firmwarehuawei ar1200 firmwareeqv200r008c50

CPE	Name	Operator	Version
huawei:ar120-s_firmware	huawei ar120-s firmware	eq	v200r006c10
huawei:ar120-s_firmware	huawei ar120-s firmware	eq	v200r007c00
huawei:ar120-s_firmware	huawei ar120-s firmware	eq	v200r008c20
huawei:ar120-s_firmware	huawei ar120-s firmware	eq	v200r008c50
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r003c01
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r005c20
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r006c10
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r007c00
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r008c20
huawei:ar1200_firmware	huawei ar1200 firmware	eq	v200r008c50

Rows per page:

1-10 of 1201

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

58.6%

JSON

Related for CVE-2019-5304

huawei2 prion1 cvelist1 openvas2