Lucene search

Huawei TechnologiesHUAWEI-SA-20200102-01-BUFFER

HistoryJan 02, 2020 - 12:00 a.m.

Security Advisory - Buffer Error Vulnerability in Some Huawei Products

2020-01-0200:00:00

Huawei Technologies

www.huawei.com

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.8%

JSON

There is a buffer error vulnerability in some Huawei products. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset. (Vulnerability ID: HWPSIRT-2019-04074)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5304.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en

Affected configurations

Vulners

Node

huaweiar120-sMatchV200R006C10

huaweiar120-sMatchV200R007C00

huaweiar120-sMatchV200R008C20

huaweiar120-sMatchV200R008C50

huaweiar1200MatchV200R003C01

huaweiar1200MatchV200R005C20

huaweiar1200MatchV200R006C10

huaweiar1200MatchV200R007C00

huaweiar1200MatchV200R008C20

huaweiar1200MatchV200R008C50

huaweiar1200-sMatchV200R003C01

huaweiar1200-sMatchV200R005C20

huaweiar1200-sMatchV200R006C10

huaweiar1200-sMatchV200R007C00

huaweiar1200-sMatchV200R008C20

huaweiar1200-sMatchV200R008C50

huaweiar150MatchV200R003C01

huaweiar150MatchV200R005C20

huaweiar150MatchV200R006C10

huaweiar150MatchV200R007C00

huaweiar150MatchV200R008C20

huaweiar150MatchV200R008C50

huaweiar150-sMatchV200R003C01

huaweiar150-sMatchV200R005C20

huaweiar150-sMatchV200R006C10

huaweiar150-sMatchV200R007C00

huaweiar150-sMatchV200R008C20

huaweiar150-sMatchV200R008C50

huaweiar160MatchV200R005C20

huaweiar160MatchV200R006C10

huaweiar160MatchV200R007C00

huaweiar160MatchV200R008C20

huaweiar160MatchV200R008C50

huaweiar200MatchV200R003C01

huaweiar200MatchV200R005C20

huaweiar200MatchV200R006C10

huaweiar200MatchV200R007C00

huaweiar200MatchV200R008C20

huaweiar200MatchV200R008C50

huaweiar200-sMatchV200R003C01

huaweiar200-sMatchV200R005C20

huaweiar200-sMatchV200R006C10

huaweiar200-sMatchV200R007C00

huaweiar200-sMatchV200R008C20

huaweiar200-sMatchV200R008C50

huaweiar2200MatchV200R003C01

huaweiar2200MatchV200R005C20

huaweiar2200MatchV200R006C10

huaweiar2200MatchV200R007C00

huaweiar2200MatchV200R008C20

huaweiar2200MatchV200R008C50

huaweiar2200-sMatchV200R003C01

huaweiar2200-sMatchV200R005C20

huaweiar2200-sMatchV200R006C10

huaweiar2200-sMatchV200R008C20

huaweiar2200-sMatchV200R008C50

huaweiar3200MatchV200R003C01

huaweiar3200MatchV200R005C20

huaweiar3200MatchV200R006C10

huaweiar3200MatchV200R007C00

huaweiar3200MatchV200R008C20

huaweiar3200MatchV200R008C50

huaweiar3600MatchV200R006C10

huaweiar3600MatchV200R007C00

huaweiar3600MatchV200R008C20

huaweiar3600MatchV200R008C50

huaweiips_moduleMatchV500R001C20

huaweiips_moduleMatchV500R001C30

huaweingfw_moduleMatchV500R001C20

huaweingfw_moduleMatchV500R002C00

huaweinip6300MatchV500R001C20

huaweinip6300MatchV500R001C30

huaweinip6600MatchV500R001C20

huaweinip6600MatchV500R001C30

huaweinetengine16exMatchV200R005C20

huaweinetengine16exMatchV200R006C10

huaweinetengine16exMatchV200R007C00

huaweinetengine16exMatchV200R008C20

huaweinetengine16exMatchV200R008C50

huaweis5700MatchV200R005C00

huaweis5700MatchV200R005C02

huaweis5700MatchV200R005C03

huaweis5700MatchV200R006C00

huaweis5700MatchV200R007C00

huaweis5700MatchV200R008C00

huaweis5700MatchV200R010C00

huaweis5700MatchV200R011C00

huaweis6700MatchV200R005C00

huaweis6700MatchV200R005C01

huaweis6700MatchV200R005C02

huaweis6700MatchV200R008C00

huaweis6700MatchV200R010C00

huaweis6700MatchV200R011C00

huaweisrg1300MatchV200R003C01

huaweisrg1300MatchV200R005C20

huaweisrg1300MatchV200R006C10

huaweisrg1300MatchV200R007C00

huaweisrg1300MatchV200R008C20

huaweisrg1300MatchV200R008C50

huaweisrg2300MatchV200R003C01

huaweisrg2300MatchV200R005C20

huaweisrg2300MatchV200R006C10

huaweisrg2300MatchV200R007C00

huaweisrg2300MatchV200R008C20

huaweisrg2300MatchV200R008C50

huaweisrg3300MatchV200R003C01

huaweisrg3300MatchV200R005C20

huaweisrg3300MatchV200R006C10

huaweisrg3300MatchV200R007C00

huaweisrg3300MatchV200R008C20

huaweisrg3300MatchV200R008C50

huaweisecospace_antiddos8000MatchV500R001C20

huaweisecospace_antiddos8000MatchV500R001C60

huaweisecospace_antiddos8000MatchV500R005C00

huaweisecospace_usg6300MatchV500R001C20

huaweisecospace_usg6300MatchV500R001C30

huaweisecospace_usg6500MatchV500R001C20

huaweisecospace_usg6500MatchV500R001C30

huaweisecospace_usg6600MatchV500R001C20

huaweisecospace_usg6600MatchV500R001C30

CPENameOperatorVersion
ar120-seqV200R006C10
ar120-seqV200R007C00
ar120-seqV200R008C20
ar120-seqV200R008C50
ar1200eqV200R003C01
ar1200eqV200R005C20
ar1200eqV200R006C10
ar1200eqV200R007C00
ar1200eqV200R008C20
ar1200eqV200R008C50

Name	Operator	Version
ar120-s	eq	V200R006C10
ar120-s	eq	V200R007C00
ar120-s	eq	V200R008C20
ar120-s	eq	V200R008C50
ar1200	eq	V200R003C01
ar1200	eq	V200R005C20
ar1200	eq	V200R006C10
ar1200	eq	V200R007C00
ar1200	eq	V200R008C20
ar1200	eq	V200R008C50

Rows per page:

1-10 of 1201

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.8%

JSON

Related for HUAWEI-SA-20200102-01-BUFFER