Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20191204-03-DOS
HistoryDec 04, 2019 - 12:00 a.m.

Security Advisory - Denial of Service Vulnerability in some Huawei Products

2019-12-0400:00:00
Huawei Technologies
www.huawei.com
71

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

Some Huawei products have a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit this vulnerability to cause DoS attacks on the target device. (Vulnerability ID: HWPSIRT-2019-08037)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5248.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en

Affected configurations

Vulners
Node
huaweicloudengine_1800vMatchv200r001c00spc700
OR
huaweicloudengine_1800vMatchv200r001c00spc600
OR
huaweicloudengine_1800vMatchv200r001c00spc700
OR
huaweicloudengine_1800vMatchv200r002c01
OR
huaweicloudengine_1800vMatchv200r002c50spc800
OR
huaweicloudengine_1800vMatchv200r002c50spc800pwe

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.2%

Related for HUAWEI-SA-20191204-03-DOS