7.4

CVE-2019-5248

CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit this vulnerability to cause DoS attacks on the target device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Cloudengine 12800 Firmware Versionv200r001c00spc600
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r001c00spc700
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c01
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c50spc800
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c50spc800pwe
   Huawei ≫ Cloudengine 12800 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.22
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.8 4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en
Vendor Advisory