6.5

CVE-2019-5259

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Version v200r005c32
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r006c10
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r008c50
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r009c00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r010c00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar1200 Firmware Version v200r005c20
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r005c32
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r006c10
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r008c50
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r009c00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200-s Firmware Version v200r005c20
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r005c32
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r006c10
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r008c50
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r009c00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar150 Firmware Version v200r005c20
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r005c32
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r006c10
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r008c50
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r009c00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150-s Firmware Version v200r005c00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r005c32
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r006c10
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r008c50
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r009c00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar160 Firmware Version v200r005c20
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r005c32
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r006c10
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r008c50
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r009c00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar200 Firmware Version v200r005c20
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r005c32
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r006c10
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r008c50
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r009c00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200-s Firmware Version v200r005c20
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r005c32
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r006c10
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r008c50
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r009c00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar2200 Firmware Version v200r005c20
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r005c32
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r006c10
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r008c50
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r009c00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200-s Firmware Version v200r005c20
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r005c32
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r006c10
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r007c00
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r008c50
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r009c00
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar3200 Firmware Version v200r005c20
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r005c32
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r006c10
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r008c50
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r009c00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3600 Firmware Version v200r006c10
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r008c50
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r009c00
   Huawei ≫ Ar3600 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.56% 0.423
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-en
Vendor Advisory