5.9

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Version v200r005c20
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r006c10
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r008c50
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar1200 Firmware Version v200r005c00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r006c10
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r008c50
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200-s Firmware Version v200r005c20
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r006c10
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r008c50
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar150 Firmware Version v200r005c20
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r006c10
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r008c50
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150-s Firmware Version v200r005c20
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r006c10
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r008c50
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar160 Firmware Version v200r005c20
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r006c10
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r008c50
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar200 Firmware Version v200r005c20
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r006c10
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r008c50
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200-s Firmware Version v200r005c20
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r006c10
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r008c50
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar2200 Firmware Version v200r005c20
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r006c10
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r008c50
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200-s Firmware Version v200r005c20
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r006c10
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r007c00
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r008c50
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar3200 Firmware Version v200r005c20
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r006c10
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r008c50
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3600 Firmware Version v200r006c10
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r008c50
   Huawei ≫ Ar3600 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r002c10
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Cloudengine 12800 Firmware Version v200r002c20
   Huawei ≫ Cloudengine 12800 Version -
Huawei ≫ Netengine16ex Firmware Version v200r005c20
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r006c10
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r007c00
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r008c50
   Huawei ≫ Netengine16ex Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00spc300
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00spc600
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r011c00spc200
   Huawei ≫ S6700 Version -
Huawei ≫ Srg1300 Firmware Version v200r005c20
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r006c10
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r007c00
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r008c50
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg2300 Firmware Version v200r005c20
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r006c10
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r007c00
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r008c50
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg3300 Firmware Version v200r005c20
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r006c10
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r007c00
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r008c50
   Huawei ≫ Srg3300 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.275
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en
Vendor Advisory