Lucene search

K
nvd[email protected]NVD:CVE-2019-19397
HistoryDec 13, 2019 - 3:15 p.m.

CVE-2019-19397

2019-12-1315:15:11
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

53.9%

There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.

Affected configurations

NVD
Node
huaweis12700_firmwareMatchv200r007c00
OR
huaweis12700_firmwareMatchv200r007c01
OR
huaweis12700_firmwareMatchv200r007c20
OR
huaweis12700_firmwareMatchv200r008c00
OR
huaweis12700_firmwareMatchv200r010c00
OR
huaweis12700_firmwareMatchv200r011c10
OR
huaweis12700_firmwareMatchv200r012c00
AND
huaweis12700Match-
Node
huaweis1700_firmwareMatchv200r006c10
OR
huaweis1700_firmwareMatchv200r010c00
OR
huaweis1700_firmwareMatchv200r011c10
OR
huaweis1700_firmwareMatchv200r012c00
OR
huaweis1700_firmwareMatchv200r012c20
AND
huaweis1700Match-
Node
huaweis2700_firmwareMatchv200r006c00
OR
huaweis2700_firmwareMatchv200r006c10
OR
huaweis2700_firmwareMatchv200r007c00
OR
huaweis2700_firmwareMatchv200r008c00
OR
huaweis2700_firmwareMatchv200r010c00
OR
huaweis2700_firmwareMatchv200r011c00
OR
huaweis2700_firmwareMatchv200r011c10
OR
huaweis2700_firmwareMatchv200r012c00
AND
huaweis2700Match-
Node
huaweis5700_firmwareMatchv200r005c00
OR
huaweis5700_firmwareMatchv200r005c02
OR
huaweis5700_firmwareMatchv200r005c03
OR
huaweis5700_firmwareMatchv200r006c00
OR
huaweis5700_firmwareMatchv200r007c00
OR
huaweis5700_firmwareMatchv200r008c00
OR
huaweis5700_firmwareMatchv200r010c00
OR
huaweis5700_firmwareMatchv200r011c00
OR
huaweis5700_firmwareMatchv200r011c10
OR
huaweis5700_firmwareMatchv200r012c00
OR
huaweis5700_firmwareMatchv200r012c20
AND
huaweis5700Match-
Node
huaweis6700_firmwareMatchv200r005c00
OR
huaweis6700_firmwareMatchv200r005c01
OR
huaweis6700_firmwareMatchv200r005c02
OR
huaweis6700_firmwareMatchv200r008c00
OR
huaweis6700_firmwareMatchv200r010c00
OR
huaweis6700_firmwareMatchv200r011c00
OR
huaweis6700_firmwareMatchv200r011c10
OR
huaweis6700_firmwareMatchv200r012c00
AND
huaweis6700Match-
Node
huaweis7700_firmwareMatchv200r006c00
OR
huaweis7700_firmwareMatchv200r007c00
OR
huaweis7700_firmwareMatchv200r008c00
OR
huaweis7700_firmwareMatchv200r010c00
OR
huaweis7700_firmwareMatchv200r011c10
OR
huaweis7700_firmwareMatchv200r012c00
AND
huaweis7700Match-
Node
huaweis9700_firmwareMatchv200r006c00
OR
huaweis9700_firmwareMatchv200r007c00
OR
huaweis9700_firmwareMatchv200r007c01
OR
huaweis9700_firmwareMatchv200r008c00
OR
huaweis9700_firmwareMatchv200r010c00
OR
huaweis9700_firmwareMatchv200r011c10
OR
huaweis9700_firmwareMatchv200r012c00
AND
huaweis9700Match-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

53.9%

Related for NVD:CVE-2019-19397