Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-5300

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Published

2019-06-04T19:29:00.633

Last Modified

2024-11-21T04:44:42.073

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-347
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei ar1200_firmware v200r007c00 Yes
Operating System huawei ar1200_firmware v200r008c20 Yes
Operating System huawei ar1200_firmware v200r008c50 Yes
Operating System huawei ar1200_firmware v200r009c00 Yes
Operating System huawei ar1200_firmware v200r010c00 Yes
Hardware huawei ar1200e - No
Hardware huawei ar1220c - No
Hardware huawei ar1220ev - No
Hardware huawei ar1220evw - No
Operating System huawei ar1200-s_firmware v200r007c00 Yes
Operating System huawei ar1200-s_firmware v200r008c20 Yes
Operating System huawei ar1200-s_firmware v200r008c50 Yes
Operating System huawei ar1200-s_firmware v200r009c00 Yes
Operating System huawei ar1200-s_firmware v200r010c00 Yes
Hardware huawei ar1220f-s - No
Operating System huawei ar150_firmware v200r007c00 Yes
Operating System huawei ar150_firmware v200r008c20 Yes
Operating System huawei ar150_firmware v200r008c50 Yes
Operating System huawei ar150_firmware v200r009c00 Yes
Operating System huawei ar150_firmware v200r010c00 Yes
Hardware huawei ar158evw - No
Operating System huawei ar160_firmware v200r007c00 Yes
Operating System huawei ar160_firmware v200r008c20 Yes
Operating System huawei ar160_firmware v200r008c50 Yes
Operating System huawei ar160_firmware v200r009c00 Yes
Operating System huawei ar160_firmware v200r010c00 Yes
Hardware huawei ar161 - No
Hardware huawei ar161ew - No
Hardware huawei ar161f - No
Hardware huawei ar161f-dgp - No
Hardware huawei ar161fg-l - No
Hardware huawei ar161fgw-l - No
Hardware huawei ar161fv-1p - No
Hardware huawei ar161fw - No
Hardware huawei ar161g-l - No
Hardware huawei ar161w - No
Hardware huawei ar168f - No
Hardware huawei ar168f-4p - No
Hardware huawei ar169 - No
Hardware huawei ar169egw-l - No
Hardware huawei ar169ew - No
Hardware huawei ar169f - No
Hardware huawei ar169fgw-l - No
Hardware huawei ar169fvw - No
Hardware huawei ar169fvw-8s - No
Hardware huawei ar169g-l - No
Hardware huawei ar169jfvw-2s - No
Hardware huawei ar169w - No
Operating System huawei ar200_firmware v200r007c00 Yes
Operating System huawei ar200_firmware v200r008c20 Yes
Operating System huawei ar200_firmware v200r008c50 Yes
Operating System huawei ar200_firmware v200r009c00 Yes
Operating System huawei ar200_firmware v200r010c00 Yes
Hardware huawei ar201 - No
Operating System huawei ar2200_firmware v200r007c00 Yes
Operating System huawei ar2200_firmware v200r008c20 Yes
Operating System huawei ar2200_firmware v200r008c50 Yes
Operating System huawei ar2200_firmware v200r009c00 Yes
Operating System huawei ar2200_firmware v200r010c00 Yes
Hardware huawei ar2204-27ge - No
Hardware huawei ar2204-27ge-p - No
Hardware huawei ar2204-51ge-p - No
Hardware huawei ar2204e - No
Hardware huawei ar2204xe - No
Hardware huawei ar2220e - No
Hardware huawei ar2240 - No
Hardware huawei ar2240c - No
Operating System huawei ar2200s_firmware v200r007c00 Yes
Operating System huawei ar2200s_firmware v200r008c20 Yes
Operating System huawei ar2200s_firmware v200r008c50 Yes
Operating System huawei ar2200s_firmware v200r009c00 Yes
Operating System huawei ar2200s_firmware v200r010c00 Yes
Hardware huawei ar2200s - No
Operating System huawei ar3200_firmware v200r007c00 Yes
Operating System huawei ar3200_firmware v200r008c20 Yes
Operating System huawei ar3200_firmware v200r008c50 Yes
Operating System huawei ar3200_firmware v200r009c00 Yes
Operating System huawei ar3200_firmware v200r010c00 Yes
Hardware huawei ar3260 - No
Operating System huawei srg1300_firmware v200r007c00 Yes
Operating System huawei srg1300_firmware v200r008c50 Yes
Operating System huawei srg1300_firmware v200r009c00 Yes
Operating System huawei srg1300_firmware v200r010c00 Yes
Hardware huawei srg1320vw - No
Operating System huawei srg2300_firmware v200r007c00 Yes
Operating System huawei srg2300_firmware v200r008c50 Yes
Operating System huawei srg2300_firmware v200r009c00 Yes
Operating System huawei srg2300_firmware v200r010c00 Yes
Hardware huawei srg2320e - No
Operating System huawei srg3300_firmware v200r007c00 Yes
Operating System huawei srg3300_firmware v200r008c50 Yes
Operating System huawei srg3300_firmware v200r009c00 Yes
Operating System huawei srg3300_firmware v200r010c00 Yes
Hardware huawei srg3340 - No
References