7.8
CVSSv2

CVE-2019-5304

Published: 03/01/2020 Updated: 09/01/2020
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

huawei ar120-s firmware v200r006c10

huawei ar120-s firmware v200r007c00

huawei ar120-s firmware v200r008c20

huawei ar120-s firmware v200r008c50

huawei ar1200 firmware v200r003c01

huawei ar1200 firmware v200r005c20

huawei ar1200 firmware v200r006c10

huawei ar1200 firmware v200r007c00

huawei ar1200 firmware v200r008c20

huawei ar1200 firmware v200r008c50

huawei ar1200-s firmware v200r003c01

huawei ar1200-s firmware v200r005c20

huawei ar1200-s firmware v200r006c10

huawei ar1200-s firmware v200r007c00

huawei ar1200-s firmware v200r008c20

huawei ar1200-s firmware v200r008c50

huawei ar150 firmware v200r003c01

huawei ar150 firmware v200r005c20

huawei ar150 firmware v200r006c10

huawei ar150 firmware v200r007c00

huawei ar150 firmware v200r008c20

huawei ar150 firmware v200r008c50

huawei ar150-s firmware v200r003c01

huawei ar150-s firmware v200r005c20

huawei ar150-s firmware v200r006c10

huawei ar150-s firmware v200r007c00

huawei ar150-s firmware v200r008c20

huawei ar150-s firmware v200r008c50

huawei ar160 firmware v200r005c20

huawei ar160 firmware v200r006c10

huawei ar160 firmware v200r007c00

huawei ar160 firmware v200r008c20

huawei ar160 firmware v200r008c50

huawei ar200 firmware v200r003c01

huawei ar200 firmware v200r005c20

huawei ar200 firmware v200r006c10

huawei ar200 firmware v200r007c00

huawei ar200 firmware v200r008c20

huawei ar200 firmware v200r008c50

huawei ar200-s firmware v200r003c01

huawei ar200-s firmware v200r005c20

huawei ar200-s firmware v200r006c10

huawei ar200-s firmware v200r007c00

huawei ar200-s firmware v200r008c20

huawei ar200-s firmware v200r008c50

huawei ar2200 firmware v200r003c01

huawei ar2200 firmware v200r005c20

huawei ar2200 firmware v200r006c10

huawei ar2200 firmware v200r007c00

huawei ar2200 firmware v200r008c20

huawei ar2200 firmware v200r008c50

huawei ar2200-s firmware v200r003c01

huawei ar2200-s firmware v200r005c20

huawei ar2200-s firmware v200r006c10

huawei ar2200-s firmware v200r008c20

huawei ar2200-s firmware v200r008c50

huawei ar3200 firmware v200r003c01

huawei ar3200 firmware v200r005c20

huawei ar3200 firmware v200r006c10

huawei ar3200 firmware v200r007c00

huawei ar3200 firmware v200r008c20

huawei ar3200 firmware v200r008c50

huawei ar3600 firmware v200r006c10

huawei ar3600 firmware v200r007c00

huawei ar3600 firmware v200r008c20

huawei ar3600 firmware v200r008c50

huawei ips module firmware v500r001c20

huawei ips module firmware v500r001c30

huawei ngfw module firmware v500r001c20

huawei ngfw module firmware v500r002c00

huawei nip6300 firmware v500r001c20

huawei nip6300 firmware v500r001c30

huawei nip6600 firmware v500r001c20

huawei nip6600 firmware v500r001c30

huawei netengine16ex firmware v200r005c20

huawei netengine16ex firmware v200r006c10

huawei netengine16ex firmware v200r007c00

huawei netengine16ex firmware v200r008c20

huawei netengine16ex firmware v200r008c50

huawei s5700 firmware v200r005c00

huawei s5700 firmware v200r005c02

huawei s5700 firmware v200r005c03

huawei s5700 firmware v200r006c00

huawei s5700 firmware v200r007c00

huawei s5700 firmware v200r008c00

huawei s5700 firmware v200r010c00

huawei s5700 firmware v200r011c00

huawei s6700 firmware v200r005c00

huawei s6700 firmware v200r005c01

huawei s6700 firmware v200r005c02

huawei s6700 firmware v200r008c00

huawei s6700 firmware v200r010c00

huawei s6700 firmware v200r011c00

huawei srg1300 firmware v200r003c01

huawei srg1300 firmware v200r005c20

huawei srg1300 firmware v200r006c10

huawei srg1300 firmware v200r007c00

huawei srg1300 firmware v200r008c20

huawei srg1300 firmware v200r008c50

huawei srg2300 firmware v200r003c01

huawei srg2300 firmware v200r005c20

huawei srg2300 firmware v200r006c10

huawei srg2300 firmware v200r007c00

huawei srg2300 firmware v200r008c20

huawei srg2300 firmware v200r008c50

huawei srg3300 firmware v200r003c01

huawei srg3300 firmware v200r005c20

huawei srg3300 firmware v200r006c10

huawei srg3300 firmware v200r007c00

huawei srg3300 firmware v200r008c20

huawei srg3300 firmware v200r008c50

huawei secospace antiddos8000 firmware v500r001c20

huawei secospace antiddos8000 firmware v500r001c60

huawei secospace antiddos8000 firmware v500r005c00

huawei secospace usg6300 firmware v500r001c20

huawei secospace usg6300 firmware v500r001c30

huawei secospace usg6500 firmware v500r001c20

huawei secospace usg6500 firmware v500r001c30

huawei secospace usg6600 firmware v500r001c20

huawei secospace usg6600 firmware v500r001c30

Vendor Advisories

There is a buffer error vulnerability in some Huawei products An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset (Vulnerability ID: HWPSIRT-2019-04074) This vulnerability ...