Lucene search

[email protected]NVD:CVE-2019-5293

HistoryNov 13, 2019 - 5:15 p.m.

CVE-2019-5293

2019-11-1317:15:14

CWE-401

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.2%

JSON

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.

Affected configurations

NVD

Node

huaweiar120-s_firmwareMatchv200r005c20

huaweiar120-s_firmwareMatchv200r006c10

AND

huaweiar120-sMatch-

Node

huaweiar1200_firmwareMatchv200r005c20

huaweiar1200_firmwareMatchv200r006c10

AND

huaweiar1200Match-

Node

huaweiar1200-s_firmwareMatchv200r005c20

huaweiar1200-s_firmwareMatchv200r006c10

AND

huaweiar1200-sMatch-

Node

huaweiar150_firmwareMatchv200r005c20

huaweiar150_firmwareMatchv200r006c10

AND

huaweiar150Match-

Node

huaweiar150-s_firmwareMatchv200r005c20

huaweiar150-s_firmwareMatchv200r006c10

AND

huaweiar150-sMatch-

Node

huaweiar160_firmwareMatchv200r005c20

huaweiar160_firmwareMatchv200r006c10

AND

huaweiar160Match-

Node

huaweiar200Match-

AND

huaweiar200_firmwareMatchv200r005c20

huaweiar200_firmwareMatchv200r006c10

Node

huaweiar200-s_firmwareMatchv200r005c20

huaweiar200-s_firmwareMatchv200r006c10

AND

huaweiar200-sMatch-

Node

huaweiar2200_firmwareMatchv200r005c20

huaweiar2200_firmwareMatchv200r006c10

AND

huaweiar2200Match-

Node

huaweiar2200-s_firmwareMatchv200r005c20

huaweiar2200-s_firmwareMatchv200r006c10

AND

huaweiar2200-sMatch-

Node

huaweiar3200_firmwareMatchv200r005c20

huaweiar3200_firmwareMatchv200r006c10

AND

huaweiar3200Match-

Node

huaweiar3600Match-

AND

huaweiar3600_firmwareMatchv200r006c10

Node

huaweinetengine16exMatch-

AND

huaweinetengine16ex_firmwareMatchv200r005c20

huaweinetengine16ex_firmwareMatchv200r006c10

Node

huaweisrg1300Match-

AND

huaweisrg1300_firmwareMatchv200r005c20

huaweisrg1300_firmwareMatchv200r006c10

Node

huaweisrg2300Match-

AND

huaweisrg2300_firmwareMatchv200r005c20

huaweisrg2300_firmwareMatchv200r006c10

Node

huaweisrg3300Match-

AND

huaweisrg3300_firmwareMatchv200r005c20

huaweisrg3300_firmwareMatchv200r006c10

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.2%

JSON

Related for NVD:CVE-2019-5293

prion1 cvelist1 cve1 openvas1 huawei1