Input validation

2020-01-0315:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

58.9%

JSON

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

CPENameOperatorVersion
ar120-s_firmwareeq200r6c10-v
ar120-s_firmwareeq200r7c0-v
ar120-s_firmwareeq200r8c20-v
ar120-s_firmwareeq200r8c50-v
ar1200-s_firmwareeq200r3c1-v
ar1200-s_firmwareeq200r5c20-v
ar1200-s_firmwareeq200r6c10-v
ar1200-s_firmwareeq200r7c0-v
ar1200-s_firmwareeq200r8c20-v
ar1200-s_firmwareeq200r8c50-v

Name	Operator	Version
ar120-s_firmware	eq	200r6c10-v
ar120-s_firmware	eq	200r7c0-v
ar120-s_firmware	eq	200r8c20-v
ar120-s_firmware	eq	200r8c50-v
ar1200-s_firmware	eq	200r3c1-v
ar1200-s_firmware	eq	200r5c20-v
ar1200-s_firmware	eq	200r6c10-v
ar1200-s_firmware	eq	200r7c0-v
ar1200-s_firmware	eq	200r8c20-v
ar1200-s_firmware	eq	200r8c50-v