Lucene search
Huawei TechnologiesHUAWEI-SA-20191204-01-VRPHistoryDec 04, 2019 - 12:00 a.m.
Security Advisory - Weak Algorithm Vulnerability in Some Huawei Products
2019-12-0400:00:00
Huawei Technologies
www.huawei.com
44
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.9%
There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks. (Vulnerability ID: HWPSIRT-2019-02008)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-19397.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en
Affected configurations
Node
huaweiar120-sMatchV200R008C50SPC500
ORhuaweiar120-sMatchV200R009C00SPC300
ORhuaweiar120-sMatchV200R009C00SPC300PWE
ORhuaweiar120-sMatchV200R009C00SPC500
ORhuaweiar1200MatchV200R008C50SPC500
ORhuaweiar1200MatchV200R008C50SPC500PWE
ORhuaweiar1200MatchV200R009C00SPC300
ORhuaweiar1200MatchV200R009C00SPC300PWE
ORhuaweiar1200MatchV200R009C00SPC500
ORhuaweiar1200MatchV200R009C00SPC500PWE
ORhuaweiar1200MatchV200R010C00SPC200
ORhuaweiar1200MatchV200R010C00SPC200PWE
ORhuaweiar1200MatchV200R010C00SPC500
ORhuaweiar1200MatchV200R010C00SPC500PWE
ORhuaweiar1200MatchV200R010C00SPC600
ORhuaweiar1200MatchV300R003C00SPC500
ORhuaweiar1200MatchV300R003C00SPC500PWE
ORhuaweiar1200MatchV300R003C00SPC600
ORhuaweiar1200-sMatchV200R008C50SPC500
ORhuaweiar1200-sMatchV200R008C50SPC500PWE
ORhuaweiar1200-sMatchV200R009C00SPC300
ORhuaweiar1200-sMatchV200R009C00SPC300PWE
ORhuaweiar1200-sMatchV200R009C00SPC500
ORhuaweiar1200-sMatchV200R009C00SPC500PWE
ORhuaweiar1200-sMatchV200R010C00SPC200
ORhuaweiar1200-sMatchV200R010C00SPC600
ORhuaweiar150MatchV200R008C50SPC500
ORhuaweiar150MatchV200R008C50SPC500PWE
ORhuaweiar150MatchV200R009C00SPC300
ORhuaweiar150MatchV200R009C00SPC300PWE
ORhuaweiar150MatchV200R009C00SPC500
ORhuaweiar150MatchV200R010C00SPC200
ORhuaweiar150MatchV200R010C00SPC600
ORhuaweiar150-sMatchV200R008C50SPC500
ORhuaweiar150-sMatchV200R009C00SPC300
ORhuaweiar150-sMatchV200R009C00SPC300PWE
ORhuaweiar150-sMatchV200R009C00SPC500
ORhuaweiar160MatchV200R008C50SPC500
ORhuaweiar160MatchV200R008C50SPC500PWE
ORhuaweiar160MatchV200R009C00SPC300
ORhuaweiar160MatchV200R009C00SPC300PWE
ORhuaweiar160MatchV200R009C00SPC500
ORhuaweiar160MatchV200R009C00SPC500PWE
ORhuaweiar160MatchV200R010C00SPC200
ORhuaweiar160MatchV200R010C00SPC500
ORhuaweiar160MatchV200R010C00SPC600
ORhuaweiar160MatchV300R003C00SPC300
ORhuaweiar160MatchV300R003C00SPC300B808
ORhuaweiar160MatchV300R003C00SPC500
ORhuaweiar160MatchV300R003C00SPC500PWE
ORhuaweiar160MatchV300R003C00SPC600
ORhuaweiar200MatchV200R008C50SPC500
ORhuaweiar200MatchV200R008C50SPC500PWE
ORhuaweiar200MatchV200R009C00SPC300
ORhuaweiar200MatchV200R009C00SPC300PWE
ORhuaweiar200MatchV200R009C00SPC500
ORhuaweiar200MatchV200R009C00SPC500PWE
ORhuaweiar200MatchV200R010C00SPC200
ORhuaweiar200MatchV200R010C00SPC600
ORhuaweiar200-sMatchV200R008C50SPC500
ORhuaweiar200-sMatchV200R009C00SPC300
ORhuaweiar200-sMatchV200R009C00SPC300PWE
ORhuaweiar200-sMatchV200R009C00SPC500
ORhuaweiar2200MatchV200R008C50SPC500
ORhuaweiar2200MatchV200R008C50SPC500PWE
ORhuaweiar2200MatchV200R009C00SPC300
ORhuaweiar2200MatchV200R009C00SPC300PWE
ORhuaweiar2200MatchV200R009C00SPC500
ORhuaweiar2200MatchV200R009C00SPC500PWE
ORhuaweiar2200MatchV200R010C00SPC200
ORhuaweiar2200MatchV200R010C00SPC200PWE
ORhuaweiar2200MatchV200R010C00SPC500
ORhuaweiar2200MatchV200R010C00SPC500PWE
ORhuaweiar2200MatchV200R010C00SPC600
ORhuaweiar2200MatchV300R003C00SPC300
ORhuaweiar2200MatchV300R003C00SPC500
ORhuaweiar2200MatchV300R003C00SPC500PWE
ORhuaweiar2200MatchV300R003C00SPC600
ORhuaweiar2200-sMatchV200R008C50SPC500
ORhuaweiar2200-sMatchV200R008C50SPC500PWE
ORhuaweiar2200-sMatchV200R009C00SPC300
ORhuaweiar2200-sMatchV200R009C00SPC300PWE
ORhuaweiar2200-sMatchV200R009C00SPC500
ORhuaweiar2200-sMatchV200R009C00SPC500PWE
ORhuaweiar2200-sMatchV200R010C00SPC200
ORhuaweiar2200-sMatchV200R010C00SPC600
ORhuaweiar3200MatchV200R008C50SPC500
ORhuaweiar3200MatchV200R008C50SPC500PWE
ORhuaweiar3200MatchV200R009C00SPC300
ORhuaweiar3200MatchV200R009C00SPC300PWE
ORhuaweiar3200MatchV200R009C00SPC500
ORhuaweiar3200MatchV200R009C00SPC500PWE
ORhuaweiar3200MatchV200R010C00SPC200
ORhuaweiar3200MatchV200R010C00SPC200PWE
ORhuaweiar3200MatchV200R010C00SPC500
ORhuaweiar3200MatchV200R010C00SPC500PWE
ORhuaweiar3200MatchV200R010C00SPC600
ORhuaweiar3200MatchV300R003C00SPC000
ORhuaweiar3200MatchV300R003C00SPC500
ORhuaweiar3200MatchV300R003C00SPC500PWE
ORhuaweiar3200MatchV300R003C00SPC600
ORhuaweiar3600MatchV200R008C50SPC500
ORhuaweiar3600MatchV200R008C50SPC500PWE
ORhuaweiar3600MatchV200R009C00SPC300
ORhuaweiar3600MatchV200R009C00SPC300PWE
ORhuaweiar3600MatchV200R009C00SPC500
ORhuaweiar3600MatchV300R003C00SPC500
ORhuaweiar3600MatchV300R003C00SPC600
ORhuaweiips_moduleMatchV500R001C20SPC100
ORhuaweiips_moduleMatchV500R001C30SPC100
ORhuaweiips_moduleMatchV500R001C30SPC200
ORhuaweingfw_moduleMatchV500R002C00SPC100
ORhuaweingfw_moduleMatchV500R002C00SPC200
ORhuaweinip6300MatchV500R001C30SPC100
ORhuaweinip6300MatchV500R001C30SPC200
ORhuaweinip6600MatchV500R001C30SPC100
ORhuaweinip6600MatchV500R001C30SPC200
ORhuaweinetengine16exMatchV200R008C50SPC500
ORhuaweinetengine16exMatchV200R009C00SPC300
ORhuaweinetengine16exMatchV200R009C00SPC300PWE
ORhuaweinetengine16exMatchV200R009C00SPC500
ORhuaweis12700MatchV200R007C00SPC500
ORhuaweis12700MatchV200R007C01
ORhuaweis12700MatchV200R007C01B380
ORhuaweis12700MatchV200R007C01B400
ORhuaweis12700MatchV200R007C20
ORhuaweis12700MatchV200R008C00
ORhuaweis12700MatchV200R010C00SPC300
ORhuaweis12700MatchV200R011C10SPC500
ORhuaweis12700MatchV200R012C00SPC200
ORhuaweis1700MatchV200R006C10SPC100
ORhuaweis1700MatchV200R010C00SPC300
ORhuaweis1700MatchV200R011C10SPC500
ORhuaweis1700MatchV200R012C00SPC200
ORhuaweis1700MatchV200R012C20
ORhuaweis2700MatchV200R006C00SPC100
ORhuaweis2700MatchV200R006C10SPC100
ORhuaweis2700MatchV200R007C00SPC500
ORhuaweis2700MatchV200R008C00
ORhuaweis2700MatchV200R010C00SPC300
ORhuaweis2700MatchV200R011C00SPC200
ORhuaweis2700MatchV200R011C10SPC500
ORhuaweis2700MatchV200R012C00SPC200
ORhuaweis5700MatchV200R005C00SPC500
ORhuaweis5700MatchV200R005C02
ORhuaweis5700MatchV200R005C03
ORhuaweis5700MatchV200R006C00SPC100
ORhuaweis5700MatchV200R007C00SPC500
ORhuaweis5700MatchV200R008C00
ORhuaweis5700MatchV200R010C00SPC300
ORhuaweis5700MatchV200R011C00SPC200
ORhuaweis5700MatchV200R011C10SPC500
ORhuaweis5700MatchV200R012C00SPC200
ORhuaweis5700MatchV200R012C20
ORhuaweis6700MatchV200R005C00SPC500
ORhuaweis6700MatchV200R005C01
ORhuaweis6700MatchV200R005C02
ORhuaweis6700MatchV200R008C00
ORhuaweis6700MatchV200R010C00SPC300
ORhuaweis6700MatchV200R011C00SPC200
ORhuaweis6700MatchV200R011C10SPC500
ORhuaweis6700MatchV200R012C00SPC200
ORhuaweis7700MatchV200R006C00SPC100
ORhuaweis7700MatchV200R007C00SPC500
ORhuaweis7700MatchV200R008C00
ORhuaweis7700MatchV200R010C00SPC300
ORhuaweis7700MatchV200R011C10SPC500
ORhuaweis7700MatchV200R012C00SPC200
ORhuaweis9700MatchV200R006C00SPC100
ORhuaweis9700MatchV200R007C00SPC500
ORhuaweis9700MatchV200R007C01
ORhuaweis9700MatchV200R008C00
ORhuaweis9700MatchV200R010C00SPC300
ORhuaweis9700MatchV200R011C10SPC500
ORhuaweis9700MatchV200R012C00SPC200
ORhuaweisrg1300MatchV200R008C50SPC500
ORhuaweisrg1300MatchV200R009C00SPC300
ORhuaweisrg1300MatchV200R009C00SPC500
ORhuaweisrg1300MatchV200R010C00SPC200
ORhuaweisrg1300MatchV200R010C00SPC600
ORhuaweisrg1300MatchV300R003C00SPC500
ORhuaweisrg2300MatchV200R008C50SPC500
ORhuaweisrg2300MatchV200R009C00SPC300
ORhuaweisrg2300MatchV200R009C00SPC500
ORhuaweisrg2300MatchV200R010C00SPC200
ORhuaweisrg2300MatchV200R010C00SPC600
ORhuaweisrg2300MatchV300R003C00SPC500
ORhuaweisrg3300MatchV200R008C50SPC500
ORhuaweisrg3300MatchV200R009C00SPC300
ORhuaweisrg3300MatchV200R009C00SPC500
ORhuaweisrg3300MatchV200R010C00SPC200
ORhuaweisrg3300MatchV200R010C00SPC600
ORhuaweisrg3300MatchV300R003C00SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC200
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC300
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C20SPC600
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC100
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC101
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC200
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC300
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC500
ORhuaweisecospace_antiddos8000MatchV500R001C60SPC600
ORhuaweisecospace_antiddos8000MatchV500R005C00SPC100
ORhuaweisecospace_antiddos8000MatchV500R005C00SPC200
ORhuaweisecospace_usg6300MatchV500R001C30SPC100
ORhuaweisecospace_usg6300MatchV500R001C30SPC200
ORhuaweisecospace_usg6500MatchV500R001C30SPC100
ORhuaweisecospace_usg6500MatchV500R001C30SPC200
ORhuaweiusg6000vMatchV500R005C00SPC100
Related
openvas
openvas
cve
cve
CVE-2019-19397
2019-12-13 15:15:11
prion
prion
Design/Logic Flaw
2019-12-13 15:15:00
cvelist
cvelist
CVE-2019-19397
2019-12-13 14:19:12
nvd
nvd
CVE-2019-19397
2019-12-13 15:15:11
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.9%
Related for HUAWEI-SA-20191204-01-VRP