4.3

CVE-2019-19411

USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Usg9500 Firmware Versionv500r001c30spc100
   Huawei ≫ Usg9500 Version-
Huawei ≫ Usg9500 Firmware Versionv500r001c30spc200
   Huawei ≫ Usg9500 Version-
Huawei ≫ Usg9500 Firmware Versionv500r001c30spc600
   Huawei ≫ Usg9500 Version-
Huawei ≫ Usg9500 Firmware Versionv500r001c60spc500
   Huawei ≫ Usg9500 Version-
Huawei ≫ Usg9500 Firmware Versionv500r005c00spc100
   Huawei ≫ Usg9500 Version-
Huawei ≫ Usg9500 Firmware Versionv500r005c00spc200
   Huawei ≫ Usg9500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.95% 0.859
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.