Lucene search

Huawei TechnologiesHUAWEI-SA-20190522-01-SWITCH

HistoryMay 22, 2019 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Huawei S Series Switch Products

2019-05-2200:00:00

Huawei Technologies

www.huawei.com

110

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

64.5%

JSON

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition.(Vulnerability ID: HWPSIRT-2019-03191)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5285.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en

Affected configurations

Vulners

Node

huaweis12700MatchV200R005C00

huaweis12700MatchV200R006C00

huaweis12700MatchV200R007C00

huaweis12700MatchV200R008C00

huaweis12700MatchV200R010C00

huaweis12700MatchV200R012C00

huaweis12700MatchV200R013C00

huaweis12700MatchV200R011C10

huaweis1700MatchV200R008C00

huaweis1700MatchV200R009C00

huaweis1700MatchV200R010C00

huaweis1700MatchV200R011C10

huaweis1700MatchV200R012C00

huaweis1700MatchV200R013C00

huaweis2300MatchV200R003C00

huaweis2300MatchV200R005C00

huaweis2300MatchV200R008C00

huaweis2300MatchV200R010C00

huaweis2300MatchV200R011C10

huaweis2300MatchV200R012C00

huaweis2300MatchV200R013C00

huaweis2700MatchV200R005C00

huaweis2700MatchV200R006C00

huaweis2700MatchV200R007C00

huaweis2700MatchV200R008C00

huaweis2700MatchV200R010C00

huaweis2700MatchV200R011C10

huaweis2700MatchV200R012C00

huaweis2700MatchV200R013C00

huaweis5300MatchV200R003C00

huaweis5300MatchV200R005C00

huaweis5300MatchV200R008C00

huaweis5300MatchV200R010C00

huaweis5300MatchV200R011C10

huaweis5300MatchV200R012C00

huaweis5300MatchV200R013C00

huaweis5700MatchV200R003C00

huaweis5700MatchV200R005C00

huaweis5700MatchV200R006C00

huaweis5700MatchV200R007C00

huaweis5700MatchV200R008C00

huaweis5700MatchV200R010C00

huaweis5700MatchV200R011C10

huaweis5700MatchV200R012C00

huaweis5700MatchV200R013C00

huaweis600-eMatchV200R008C00

huaweis600-eMatchV200R010C00

huaweis600-eMatchV200R011C10

huaweis600-eMatchV200R012C00

huaweis600-eMatchV200R013C00

huaweis6300MatchV200R003C00

huaweis6300MatchV200R005C00

huaweis6300MatchV200R007C00

huaweis6300MatchV200R008C00

huaweis6300MatchV200R010C00

huaweis6300MatchV200R011C10

huaweis6300MatchV200R012C00

huaweis6300MatchV200R013C00

huaweis6700MatchV200R003C00

huaweis6700MatchV200R005C00

huaweis6700MatchV200R007C00

huaweis6700MatchV200R008C00

huaweis6700MatchV200R010C00

huaweis6700MatchV200R011C10

huaweis6700MatchV200R012C00

huaweis6700MatchV200R013C00

huaweis7700MatchV200R003C00

huaweis7700MatchV200R005C00

huaweis7700MatchV200R006C00

huaweis7700MatchV200R007C00

huaweis7700MatchV200R008C00

huaweis7700MatchV200R010C00

huaweis7700MatchV200R011C10

huaweis7700MatchV200R012C00

huaweis7700MatchV200R013C00

huaweis7900MatchV200R011C10

huaweis7900MatchV200R012C00

huaweis7900MatchV200R013C00

huaweis9300MatchV200R003C00

huaweis9300MatchV200R008C00

huaweis9300MatchV200R008C10

huaweis9300MatchV200R010C00

huaweis9300MatchV200R011C10

huaweis9300MatchV200R012C00

huaweis9300MatchV200R013C00

huaweis9300xMatchV200R010C00

huaweis9300xMatchV200R011C10

huaweis9300xMatchV200R012C00

huaweis9300xMatchV200R013C00

huaweis9700MatchV200R003C00

huaweis9700MatchV200R005C00

huaweis9700MatchV200R006C00

huaweis9700MatchV200R007C00

huaweis9700MatchV200R008C00

huaweis9700MatchV200R010C00

huaweis9700MatchV200R011C10

huaweis9700MatchV200R012C00

huaweis9700MatchV200R013C00

CPENameOperatorVersion
s12700eqV200R005C00
s12700eqV200R006C00
s12700eqV200R007C00
s12700eqV200R008C00
s12700eqV200R010C00
s12700eqV200R012C00
s12700eqV200R013C00
s12700eqV200R011C10
s1700eqV200R008C00
s1700eqV200R009C00

Name	Operator	Version
s12700	eq	V200R005C00
s12700	eq	V200R006C00
s12700	eq	V200R007C00
s12700	eq	V200R008C00
s12700	eq	V200R010C00
s12700	eq	V200R012C00
s12700	eq	V200R013C00
s12700	eq	V200R011C10
s1700	eq	V200R008C00
s1700	eq	V200R009C00

Rows per page:

1-10 of 981

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

64.5%

JSON

Related for HUAWEI-SA-20190522-01-SWITCH