Lucene search

Huawei TechnologiesHUAWEI-SA-20190529-01-REPLAY

HistoryMay 29, 2019 - 12:00 a.m.

Security Advisory - Some Huawei 4G LTE devices are exposed to a message replay vulnerability

2019-05-2900:00:00

Huawei Technologies

www.huawei.com

112

CVSS2

4.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

CVSS3

4.2

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

25.0%

JSON

Some Huawei 4G LTE devices are exposed to a message replay vulnerability. or the sake of better compatibility, these devices implement a less strict check on the NAS message sequence number (SN), specifically NAS COUNT. As a result, an attacker can construct a rogue base station and replay the GUTI reallocation command message in certain conditions to tamper with GUTIs, or replay the Identity request message to obtain IMSIs. (Vulnerability ID: HWPSIRT-2019-04107)

This vulnerability has been assigned a CVE ID: CVE-2019-5307.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190529-01-replay-en

Affected configurations

Vulners

Node

huaweip30_firmwareMatchele-al00

huaweip30_firmwareMatch9.1.0.162

huaweip30_pro_firmwareMatchvog-al00

huaweip30_pro_firmwareMatch9.1.0.162

VendorProductVersionCPE
huaweip30_firmwareele-al00cpe:2.3:o:huawei:p30_firmware:ele-al00:*:*:*:*:*:*:*
huaweip30_firmware9.1.0.162cpe:2.3:o:huawei:p30_firmware:9.1.0.162:*:*:*:*:*:*:*
huaweip30_pro_firmwarevog-al00cpe:2.3:o:huawei:p30_pro_firmware:vog-al00:*:*:*:*:*:*:*
huaweip30_pro_firmware9.1.0.162cpe:2.3:o:huawei:p30_pro_firmware:9.1.0.162:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	p30_firmware	ele-al00	cpe:2.3:o:huawei:p30_firmware:ele-al00:::::::*
huawei	p30_firmware	9.1.0.162	cpe:2.3:o:huawei:p30_firmware:9.1.0.162:::::::*
huawei	p30_pro_firmware	vog-al00	cpe:2.3:o:huawei:p30_pro_firmware:vog-al00:::::::*
huawei	p30_pro_firmware	9.1.0.162	cpe:2.3:o:huawei:p30_pro_firmware:9.1.0.162:::::::*

CVSS2

4.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

CVSS3

4.2

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

25.0%

JSON

Related for HUAWEI-SA-20190529-01-REPLAY