Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huaweiHuawei TechnologiesHUAWEI-SA-20200102-01-BUFFER
HistoryJan 02, 2020 - 12:00 a.m.

Security Advisory - Buffer Error Vulnerability in Some Huawei Products

2020-01-0200:00:00
Huawei Technologies
www.huawei.com
53

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.9%

JSON

There is a buffer error vulnerability in some Huawei products. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset. (Vulnerability ID: HWPSIRT-2019-04074)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5304.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en

Affected configurations

Vulners
Node
huaweiar120-sMatchV200R006C10
OR
huaweiar120-sMatchV200R007C00
OR
huaweiar120-sMatchV200R008C20
OR
huaweiar120-sMatchV200R008C50
OR
huaweiar1200MatchV200R003C01
OR
huaweiar1200MatchV200R005C20
OR
huaweiar1200MatchV200R006C10
OR
huaweiar1200MatchV200R007C00
OR
huaweiar1200MatchV200R008C20
OR
huaweiar1200MatchV200R008C50
OR
huaweiar1200-sMatchV200R003C01
OR
huaweiar1200-sMatchV200R005C20
OR
huaweiar1200-sMatchV200R006C10
OR
huaweiar1200-sMatchV200R007C00
OR
huaweiar1200-sMatchV200R008C20
OR
huaweiar1200-sMatchV200R008C50
OR
huaweiar150MatchV200R003C01
OR
huaweiar150MatchV200R005C20
OR
huaweiar150MatchV200R006C10
OR
huaweiar150MatchV200R007C00
OR
huaweiar150MatchV200R008C20
OR
huaweiar150MatchV200R008C50
OR
huaweiar150-sMatchV200R003C01
OR
huaweiar150-sMatchV200R005C20
OR
huaweiar150-sMatchV200R006C10
OR
huaweiar150-sMatchV200R007C00
OR
huaweiar150-sMatchV200R008C20
OR
huaweiar150-sMatchV200R008C50
OR
huaweiar160MatchV200R005C20
OR
huaweiar160MatchV200R006C10
OR
huaweiar160MatchV200R007C00
OR
huaweiar160MatchV200R008C20
OR
huaweiar160MatchV200R008C50
OR
huaweiar200MatchV200R003C01
OR
huaweiar200MatchV200R005C20
OR
huaweiar200MatchV200R006C10
OR
huaweiar200MatchV200R007C00
OR
huaweiar200MatchV200R008C20
OR
huaweiar200MatchV200R008C50
OR
huaweiar200-sMatchV200R003C01
OR
huaweiar200-sMatchV200R005C20
OR
huaweiar200-sMatchV200R006C10
OR
huaweiar200-sMatchV200R007C00
OR
huaweiar200-sMatchV200R008C20
OR
huaweiar200-sMatchV200R008C50
OR
huaweiar2200MatchV200R003C01
OR
huaweiar2200MatchV200R005C20
OR
huaweiar2200MatchV200R006C10
OR
huaweiar2200MatchV200R007C00
OR
huaweiar2200MatchV200R008C20
OR
huaweiar2200MatchV200R008C50
OR
huaweiar2200-sMatchV200R003C01
OR
huaweiar2200-sMatchV200R005C20
OR
huaweiar2200-sMatchV200R006C10
OR
huaweiar2200-sMatchV200R008C20
OR
huaweiar2200-sMatchV200R008C50
OR
huaweiar3200MatchV200R003C01
OR
huaweiar3200MatchV200R005C20
OR
huaweiar3200MatchV200R006C10
OR
huaweiar3200MatchV200R007C00
OR
huaweiar3200MatchV200R008C20
OR
huaweiar3200MatchV200R008C50
OR
huaweiar3600MatchV200R006C10
OR
huaweiar3600MatchV200R007C00
OR
huaweiar3600MatchV200R008C20
OR
huaweiar3600MatchV200R008C50
OR
huaweiips_moduleMatchV500R001C20
OR
huaweiips_moduleMatchV500R001C30
OR
huaweingfw_moduleMatchV500R001C20
OR
huaweingfw_moduleMatchV500R002C00
OR
huaweinip6300MatchV500R001C20
OR
huaweinip6300MatchV500R001C30
OR
huaweinip6600MatchV500R001C20
OR
huaweinip6600MatchV500R001C30
OR
huaweinetengine16exMatchV200R005C20
OR
huaweinetengine16exMatchV200R006C10
OR
huaweinetengine16exMatchV200R007C00
OR
huaweinetengine16exMatchV200R008C20
OR
huaweinetengine16exMatchV200R008C50
OR
huaweis5700MatchV200R005C00
OR
huaweis5700MatchV200R005C02
OR
huaweis5700MatchV200R005C03
OR
huaweis5700MatchV200R006C00
OR
huaweis5700MatchV200R007C00
OR
huaweis5700MatchV200R008C00
OR
huaweis5700MatchV200R010C00
OR
huaweis5700MatchV200R011C00
OR
huaweis6700MatchV200R005C00
OR
huaweis6700MatchV200R005C01
OR
huaweis6700MatchV200R005C02
OR
huaweis6700MatchV200R008C00
OR
huaweis6700MatchV200R010C00
OR
huaweis6700MatchV200R011C00
OR
huaweisrg1300MatchV200R003C01
OR
huaweisrg1300MatchV200R005C20
OR
huaweisrg1300MatchV200R006C10
OR
huaweisrg1300MatchV200R007C00
OR
huaweisrg1300MatchV200R008C20
OR
huaweisrg1300MatchV200R008C50
OR
huaweisrg2300MatchV200R003C01
OR
huaweisrg2300MatchV200R005C20
OR
huaweisrg2300MatchV200R006C10
OR
huaweisrg2300MatchV200R007C00
OR
huaweisrg2300MatchV200R008C20
OR
huaweisrg2300MatchV200R008C50
OR
huaweisrg3300MatchV200R003C01
OR
huaweisrg3300MatchV200R005C20
OR
huaweisrg3300MatchV200R006C10
OR
huaweisrg3300MatchV200R007C00
OR
huaweisrg3300MatchV200R008C20
OR
huaweisrg3300MatchV200R008C50
OR
huaweisecospace_antiddos8000MatchV500R001C20
OR
huaweisecospace_antiddos8000MatchV500R001C60
OR
huaweisecospace_antiddos8000MatchV500R005C00
OR
huaweisecospace_usg6300MatchV500R001C20
OR
huaweisecospace_usg6300MatchV500R001C30
OR
huaweisecospace_usg6500MatchV500R001C20
OR
huaweisecospace_usg6500MatchV500R001C30
OR
huaweisecospace_usg6600MatchV500R001C20
OR
huaweisecospace_usg6600MatchV500R001C30

Related

huawei 1
nvd 1
cve 1
openvas 2
cvelist 1
prion 1
huawei
huawei
Security Advisory - Improper Authentication Vulnerability in Some Huawei CloudEngine Products
2019-09-18 00:00:00
nvd
nvd
CVE-2019-5304
2020-01-03 15:15:11
cve
cve
CVE-2019-5304
2020-01-03 15:15:11
openvas
openvas
Huawei Data Communication: Improper Authentication Vulnerability in Some Huawei CloudEngine Products (huawei-sa-20190918-01-authentication)
2020-06-05 00:00:00
Huawei Data Communication: Buffer Error Vulnerability in Some Huawei Products (huawei-sa-20200102-01-buffer)
2020-06-30 00:00:00
cvelist
cvelist
CVE-2019-5304
2020-01-03 14:33:41
prion
prion
Input validation
2020-01-03 15:15:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

58.9%

JSON
Related for HUAWEI-SA-20200102-01-BUFFER
huawei1nvd1cve1openvas2cvelist1prion1