Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-5291


Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.


Published

2019-12-13T15:15:11.457

Last Modified

2024-11-21T04:44:41.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-345

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei ar120-s_firmware v200r005c20 Yes
Operating System huawei ar120-s_firmware v200r006c10 Yes
Operating System huawei ar120-s_firmware v200r007c00 Yes
Operating System huawei ar120-s_firmware v200r008c50 Yes
Hardware huawei ar120-s - No
Operating System huawei ar1200_firmware v200r005c00 Yes
Operating System huawei ar1200_firmware v200r006c10 Yes
Operating System huawei ar1200_firmware v200r007c00 Yes
Operating System huawei ar1200_firmware v200r008c50 Yes
Hardware huawei ar1200 - No
Operating System huawei ar1200-s_firmware v200r005c20 Yes
Operating System huawei ar1200-s_firmware v200r006c10 Yes
Operating System huawei ar1200-s_firmware v200r007c00 Yes
Operating System huawei ar1200-s_firmware v200r008c50 Yes
Hardware huawei ar1200-s - No
Operating System huawei ar150_firmware v200r005c20 Yes
Operating System huawei ar150_firmware v200r006c10 Yes
Operating System huawei ar150_firmware v200r007c00 Yes
Operating System huawei ar150_firmware v200r008c50 Yes
Hardware huawei ar150 - No
Operating System huawei ar150-s_firmware v200r005c20 Yes
Operating System huawei ar150-s_firmware v200r006c10 Yes
Operating System huawei ar150-s_firmware v200r007c00 Yes
Operating System huawei ar150-s_firmware v200r008c50 Yes
Hardware huawei ar150-s - No
Operating System huawei ar160_firmware v200r005c20 Yes
Operating System huawei ar160_firmware v200r006c10 Yes
Operating System huawei ar160_firmware v200r007c00 Yes
Operating System huawei ar160_firmware v200r008c50 Yes
Hardware huawei ar160 - No
Operating System huawei ar200_firmware v200r005c20 Yes
Operating System huawei ar200_firmware v200r006c10 Yes
Operating System huawei ar200_firmware v200r007c00 Yes
Operating System huawei ar200_firmware v200r008c50 Yes
Hardware huawei ar200 - No
Operating System huawei ar200-s_firmware v200r005c20 Yes
Operating System huawei ar200-s_firmware v200r006c10 Yes
Operating System huawei ar200-s_firmware v200r007c00 Yes
Operating System huawei ar200-s_firmware v200r008c50 Yes
Hardware huawei ar200-s - No
Operating System huawei ar2200_firmware v200r005c20 Yes
Operating System huawei ar2200_firmware v200r006c10 Yes
Operating System huawei ar2200_firmware v200r007c00 Yes
Operating System huawei ar2200_firmware v200r008c50 Yes
Hardware huawei ar2200 - No
Operating System huawei ar2200-s_firmware v200r005c20 Yes
Operating System huawei ar2200-s_firmware v200r006c10 Yes
Operating System huawei ar2200-s_firmware v200r007c00 Yes
Operating System huawei ar2200-s_firmware v200r008c50 Yes
Hardware huawei ar2200-s - No
Operating System huawei ar3200_firmware v200r005c20 Yes
Operating System huawei ar3200_firmware v200r006c10 Yes
Operating System huawei ar3200_firmware v200r007c00 Yes
Operating System huawei ar3200_firmware v200r008c50 Yes
Hardware huawei ar3200 - No
Operating System huawei ar3600_firmware v200r006c10 Yes
Operating System huawei ar3600_firmware v200r007c00 Yes
Operating System huawei ar3600_firmware v200r008c50 Yes
Hardware huawei ar3600 - No
Operating System huawei cloudengine_12800_firmware v200r002c10 Yes
Operating System huawei cloudengine_12800_firmware v200r002c20 Yes
Hardware huawei cloudengine_12800 - No
Operating System huawei netengine16ex_firmware v200r005c20 Yes
Operating System huawei netengine16ex_firmware v200r006c10 Yes
Operating System huawei netengine16ex_firmware v200r007c00 Yes
Operating System huawei netengine16ex_firmware v200r008c50 Yes
Hardware huawei netengine16ex - No
Operating System huawei s6700_firmware v200r008c00 Yes
Operating System huawei s6700_firmware v200r010c00spc300 Yes
Operating System huawei s6700_firmware v200r010c00spc600 Yes
Operating System huawei s6700_firmware v200r011c00spc200 Yes
Hardware huawei s6700 - No
Operating System huawei srg1300_firmware v200r005c20 Yes
Operating System huawei srg1300_firmware v200r006c10 Yes
Operating System huawei srg1300_firmware v200r007c00 Yes
Operating System huawei srg1300_firmware v200r008c50 Yes
Hardware huawei srg1300 - No
Operating System huawei srg2300_firmware v200r005c20 Yes
Operating System huawei srg2300_firmware v200r006c10 Yes
Operating System huawei srg2300_firmware v200r007c00 Yes
Operating System huawei srg2300_firmware v200r008c50 Yes
Hardware huawei srg2300 - No
Operating System huawei srg3300_firmware v200r005c20 Yes
Operating System huawei srg3300_firmware v200r006c10 Yes
Operating System huawei srg3300_firmware v200r007c00 Yes
Operating System huawei srg3300_firmware v200r008c50 Yes
Hardware huawei srg3300 - No

References