Lucene search
HistoryDec 13, 2019 - 11:15 p.m.
CVE-2019-5256
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this vulnerability by sending crafted parameters. A successful exploit could cause a denial of service and the process reboot.
Affected configurations
Node
huaweiap2000_firmwareMatchv200r005c30
ORhuaweiap2000_firmwareMatchv200r006c10
ORhuaweiap2000_firmwareMatchv200r006c20
ORhuaweiap2000_firmwareMatchv200r007c10
ORhuaweiap2000_firmwareMatchv200r007c20
ORhuaweiap2000_firmwareMatchv200r008c00
ORhuaweiap2000_firmwareMatchv200r008c10
ORhuaweiap2000_firmwareMatchv200r009c00
huaweiap2000Match-
Node
huaweiips_firmwareMatchv500r001c00spc300
ORhuaweiips_firmwareMatchv500r001c00spc500
ORhuaweiips_firmwareMatchv500r001c00sph303
ORhuaweiips_firmwareMatchv500r001c00sph508
ORhuaweiips_firmwareMatchv500r001c20
ORhuaweiips_firmwareMatchv500r001c20spc100
ORhuaweiips_firmwareMatchv500r001c20spc100pwe
ORhuaweiips_firmwareMatchv500r001c20spc200
ORhuaweiips_firmwareMatchv500r001c20spc200b062
ORhuaweiips_firmwareMatchv500r001c20spc200pwe
ORhuaweiips_firmwareMatchv500r001c20spc300b078
ORhuaweiips_firmwareMatchv500r001c20spc300pwe
ORhuaweiips_firmwareMatchv500r001c30
ORhuaweiips_firmwareMatchv500r001c30spc100
ORhuaweiips_firmwareMatchv500r001c30spc100pwe
ORhuaweiips_firmwareMatchv500r001c30spc200
ORhuaweiips_firmwareMatchv500r001c30spc200pwe
ORhuaweiips_firmwareMatchv500r001c30spc300
ORhuaweiips_firmwareMatchv500r001c50
ORhuaweiips_firmwareMatchv500r001c50pwe
ORhuaweiips_firmwareMatchv500r001c80
ORhuaweiips_firmwareMatchv500r005c00
huaweiipsMatch-
Node
huaweingfw_firmwareMatchv500r001c00spc300
ORhuaweingfw_firmwareMatchv500r001c00spc500
ORhuaweingfw_firmwareMatchv500r001c00spc500pwe
ORhuaweingfw_firmwareMatchv500r001c00sph303
ORhuaweingfw_firmwareMatchv500r001c00sph508
ORhuaweingfw_firmwareMatchv500r001c20
ORhuaweingfw_firmwareMatchv500r001c20spc100
ORhuaweingfw_firmwareMatchv500r001c20spc100pwe
ORhuaweingfw_firmwareMatchv500r001c20spc200
ORhuaweingfw_firmwareMatchv500r001c20spc200b062
ORhuaweingfw_firmwareMatchv500r001c20spc200pwe
ORhuaweingfw_firmwareMatchv500r001c20spc300b078
ORhuaweingfw_firmwareMatchv500r001c20spc300pwe
ORhuaweingfw_firmwareMatchv500r002c00
ORhuaweingfw_firmwareMatchv500r002c00spc100
ORhuaweingfw_firmwareMatchv500r002c00spc100pwe
ORhuaweingfw_firmwareMatchv500r002c00spc200
ORhuaweingfw_firmwareMatchv500r002c00spc200pwe
ORhuaweingfw_firmwareMatchv500r002c00spc300
ORhuaweingfw_firmwareMatchv500r002c10
ORhuaweingfw_firmwareMatchv500r002c10pwe
ORhuaweingfw_firmwareMatchv500r002c30
ORhuaweingfw_firmwareMatchv500r002c30pwe
ORhuaweingfw_firmwareMatchv500r005c00
huaweingfwMatch-
Node
huaweinip6300_firmwareMatchv500r001c00spc300
ORhuaweinip6300_firmwareMatchv500r001c00spc500
ORhuaweinip6300_firmwareMatchv500r001c00sph303
ORhuaweinip6300_firmwareMatchv500r001c00sph508
ORhuaweinip6300_firmwareMatchv500r001c20
ORhuaweinip6300_firmwareMatchv500r001c20spc100
ORhuaweinip6300_firmwareMatchv500r001c20spc100pwe
ORhuaweinip6300_firmwareMatchv500r001c20spc200
ORhuaweinip6300_firmwareMatchv500r001c20spc200b062
ORhuaweinip6300_firmwareMatchv500r001c20spc200pwe
ORhuaweinip6300_firmwareMatchv500r001c20spc300b078
ORhuaweinip6300_firmwareMatchv500r001c20spc300pwe
ORhuaweinip6300_firmwareMatchv500r001c30
ORhuaweinip6300_firmwareMatchv500r001c30spc100
ORhuaweinip6300_firmwareMatchv500r001c30spc100pwe
ORhuaweinip6300_firmwareMatchv500r001c30spc200
ORhuaweinip6300_firmwareMatchv500r001c30spc200pwe
ORhuaweinip6300_firmwareMatchv500r001c30spc300
ORhuaweinip6300_firmwareMatchv500r001c50
ORhuaweinip6300_firmwareMatchv500r001c50pwe
ORhuaweinip6300_firmwareMatchv500r001c80
ORhuaweinip6300_firmwareMatchv500r005c00
huaweinip6300Match-
Node
huaweinip6600_firmwareMatchv500r001c00spc300
ORhuaweinip6600_firmwareMatchv500r001c00spc500
ORhuaweinip6600_firmwareMatchv500r001c00sph303
ORhuaweinip6600_firmwareMatchv500r001c00sph508
ORhuaweinip6600_firmwareMatchv500r001c20
ORhuaweinip6600_firmwareMatchv500r001c20spc100
ORhuaweinip6600_firmwareMatchv500r001c20spc100pwe
ORhuaweinip6600_firmwareMatchv500r001c20spc200
ORhuaweinip6600_firmwareMatchv500r001c20spc200b062
ORhuaweinip6600_firmwareMatchv500r001c20spc200pwe
ORhuaweinip6600_firmwareMatchv500r001c20spc300b078
ORhuaweinip6600_firmwareMatchv500r001c30
ORhuaweinip6600_firmwareMatchv500r001c30spc100
ORhuaweinip6600_firmwareMatchv500r001c30spc100pwe
ORhuaweinip6600_firmwareMatchv500r001c30spc200
ORhuaweinip6600_firmwareMatchv500r001c30spc200pwe
ORhuaweinip6600_firmwareMatchv500r001c30spc300
ORhuaweinip6600_firmwareMatchv500r001c50
ORhuaweinip6600_firmwareMatchv500r001c50pwe
ORhuaweinip6600_firmwareMatchv500r001c80
ORhuaweinip6600_firmwareMatchv500r005c00
huaweinip6600Match-
Node
huaweinip6800_firmwareMatchv500r001c50
ORhuaweinip6800_firmwareMatchv500r001c50pwe
ORhuaweinip6800_firmwareMatchv500r001c80
ORhuaweinip6800_firmwareMatchv500r005c00
huaweinip6800Match-
Node
huaweis5700_firmwareMatchv200r005c03
huaweis5700Match-
Node
huaweisvn5600_firmwareMatchv200r003c00spc100
huaweisvn5600Match-
Node
huaweisvn5800_firmwareMatchv200r003c00spc100
huaweisvn5800Match-
Node
huaweisvn5800-c_firmwareMatchv200r003c00spc100
huaweisvn5800-cMatch-
Node
huaweisemg9811_firmwareMatchv500r002c20
ORhuaweisemg9811_firmwareMatchv500r002c30
ORhuaweisemg9811_firmwareMatchv500r005c00
huaweisemg9811Match-
Node
huaweisecospace_antiddos8000_firmwareMatchv500r001c00
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00spc200
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00spc300
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00spc500
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00spc600
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00spc700
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c00sph303
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c20spc200
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c20spc300
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c20spc500
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c20spc600
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc100
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc101
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc200
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc300
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc500
ORhuaweisecospace_antiddos8000_firmwareMatchv500r001c60spc600
ORhuaweisecospace_antiddos8000_firmwareMatchv500r005c00
ORhuaweisecospace_antiddos8000_firmwareMatchv500r005c00spc100
huaweisecospace_antiddos8000Match-
Node
huaweisecospace_usg6300_firmwareMatchv100r001c20spc100
ORhuaweisecospace_usg6300_firmwareMatchv500r001c00spc300
ORhuaweisecospace_usg6300_firmwareMatchv500r001c00spc500
ORhuaweisecospace_usg6300_firmwareMatchv500r001c00spc500pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c00sph303
ORhuaweisecospace_usg6300_firmwareMatchv500r001c00sph508
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc100
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc100pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc101
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc200
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc200b062
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc200pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc300b078
ORhuaweisecospace_usg6300_firmwareMatchv500r001c20spc300pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30spc100
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30spc100pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30spc200
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30spc200pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c30spc300
ORhuaweisecospace_usg6300_firmwareMatchv500r001c50
ORhuaweisecospace_usg6300_firmwareMatchv500r001c50pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r001c80
ORhuaweisecospace_usg6300_firmwareMatchv500r001c80pwe
ORhuaweisecospace_usg6300_firmwareMatchv500r005c00
huaweisecospace_usg6300Match-
Node
huaweisecospace_usg6500_firmwareMatchv100r001c20spc100
ORhuaweisecospace_usg6500_firmwareMatchv500r001c00spc300
ORhuaweisecospace_usg6500_firmwareMatchv500r001c00spc500
ORhuaweisecospace_usg6500_firmwareMatchv500r001c00spc500pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c00sph303
ORhuaweisecospace_usg6500_firmwareMatchv500r001c00sph508
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc100
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc100pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc101
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc200
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc200b062
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc200pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc300b078
ORhuaweisecospace_usg6500_firmwareMatchv500r001c20spc300pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30spc100
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30spc100pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30spc200
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30spc200pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c30spc300
ORhuaweisecospace_usg6500_firmwareMatchv500r001c50
ORhuaweisecospace_usg6500_firmwareMatchv500r001c50pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r001c80
ORhuaweisecospace_usg6500_firmwareMatchv500r001c80pwe
ORhuaweisecospace_usg6500_firmwareMatchv500r005c00
huaweisecospace_usg6500Match-
Node
huaweisecospace_usg6600_firmwareMatchv100r001c00spc200
ORhuaweisecospace_usg6600_firmwareMatchv100r001c10spc200
ORhuaweisecospace_usg6600_firmwareMatchv100r001c10spc201
ORhuaweisecospace_usg6600_firmwareMatchv100r001c20spc100
ORhuaweisecospace_usg6600_firmwareMatchv100r001c20spc200
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00spc050
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00spc090
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00spc300
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00spc500
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00spc500pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c00sph303
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc100
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc100pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc101
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc200
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc200pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc300
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc300b078
ORhuaweisecospace_usg6600_firmwareMatchv500r001c20spc300pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc100
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc100pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc200
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc200pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc300
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc500
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc600
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc600pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c30spc601
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc009
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc100
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc100pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc200
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc200pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c50spc300
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc100
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc100pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc200
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc200pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc300
ORhuaweisecospace_usg6600_firmwareMatchv500r001c60spc500
ORhuaweisecospace_usg6600_firmwareMatchv500r001c80
ORhuaweisecospace_usg6600_firmwareMatchv500r001c80pwe
ORhuaweisecospace_usg6600_firmwareMatchv500r005c00
ORhuaweisecospace_usg6600_firmwareMatchv500r005c00spc100
ORhuaweisecospace_usg6600_firmwareMatchv500r005c00spc102
huaweisecospace_usg6600Match-
Node
huaweiusg6000v_firmwareMatchv500r001c10
ORhuaweiusg6000v_firmwareMatchv500r001c10spc100
ORhuaweiusg6000v_firmwareMatchv500r001c10spc200
ORhuaweiusg6000v_firmwareMatchv500r001c20
ORhuaweiusg6000v_firmwareMatchv500r001c20spc100
ORhuaweiusg6000v_firmwareMatchv500r001c20spc200
ORhuaweiusg6000v_firmwareMatchv500r001c20spc300
ORhuaweiusg6000v_firmwareMatchv500r001c20spc500
ORhuaweiusg6000v_firmwareMatchv500r001c20spc600
ORhuaweiusg6000v_firmwareMatchv500r003c00
ORhuaweiusg6000v_firmwareMatchv500r003c00spc100
ORhuaweiusg6000v_firmwareMatchv500r005c00
ORhuaweiusg6000v_firmwareMatchv500r005c00spc100
huaweiusg6000vMatch-
Node
huaweiespace_u1981_firmwareMatchv200r003c50spc700
huaweiespace_u1981Match-
Related
prion
prion
Null pointer dereference
2019-12-13 23:15:00
cve
cve
CVE-2019-5256
2019-12-13 23:15:11
cvelist
cvelist
CVE-2019-5256
2019-12-13 22:45:34
openvas
openvas
huawei
huawei
Security Advisory - Multiple Vulnerabilities in Some Huawei Products
2019-12-11 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2019-5256