5.9

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Versionv200r005c20
   Huawei ≫ Ar120-s Version-
Huawei ≫ Ar120-s Firmware Versionv200r006c10
   Huawei ≫ Ar120-s Version-
Huawei ≫ Ar120-s Firmware Versionv200r007c00
   Huawei ≫ Ar120-s Version-
Huawei ≫ Ar120-s Firmware Versionv200r008c50
   Huawei ≫ Ar120-s Version-
Huawei ≫ Ar1200 Firmware Versionv200r005c00
   Huawei ≫ Ar1200 Version-
Huawei ≫ Ar1200 Firmware Versionv200r006c10
   Huawei ≫ Ar1200 Version-
Huawei ≫ Ar1200 Firmware Versionv200r007c00
   Huawei ≫ Ar1200 Version-
Huawei ≫ Ar1200 Firmware Versionv200r008c50
   Huawei ≫ Ar1200 Version-
Huawei ≫ Ar1200-s Firmware Versionv200r005c20
   Huawei ≫ Ar1200-s Version-
Huawei ≫ Ar1200-s Firmware Versionv200r006c10
   Huawei ≫ Ar1200-s Version-
Huawei ≫ Ar1200-s Firmware Versionv200r007c00
   Huawei ≫ Ar1200-s Version-
Huawei ≫ Ar1200-s Firmware Versionv200r008c50
   Huawei ≫ Ar1200-s Version-
Huawei ≫ Ar150 Firmware Versionv200r005c20
   Huawei ≫ Ar150 Version-
Huawei ≫ Ar150 Firmware Versionv200r006c10
   Huawei ≫ Ar150 Version-
Huawei ≫ Ar150 Firmware Versionv200r007c00
   Huawei ≫ Ar150 Version-
Huawei ≫ Ar150 Firmware Versionv200r008c50
   Huawei ≫ Ar150 Version-
Huawei ≫ Ar150-s Firmware Versionv200r005c20
   Huawei ≫ Ar150-s Version-
Huawei ≫ Ar150-s Firmware Versionv200r006c10
   Huawei ≫ Ar150-s Version-
Huawei ≫ Ar150-s Firmware Versionv200r007c00
   Huawei ≫ Ar150-s Version-
Huawei ≫ Ar150-s Firmware Versionv200r008c50
   Huawei ≫ Ar150-s Version-
Huawei ≫ Ar160 Firmware Versionv200r005c20
   Huawei ≫ Ar160 Version-
Huawei ≫ Ar160 Firmware Versionv200r006c10
   Huawei ≫ Ar160 Version-
Huawei ≫ Ar160 Firmware Versionv200r007c00
   Huawei ≫ Ar160 Version-
Huawei ≫ Ar160 Firmware Versionv200r008c50
   Huawei ≫ Ar160 Version-
Huawei ≫ Ar200 Firmware Versionv200r005c20
   Huawei ≫ Ar200 Version-
Huawei ≫ Ar200 Firmware Versionv200r006c10
   Huawei ≫ Ar200 Version-
Huawei ≫ Ar200 Firmware Versionv200r007c00
   Huawei ≫ Ar200 Version-
Huawei ≫ Ar200 Firmware Versionv200r008c50
   Huawei ≫ Ar200 Version-
Huawei ≫ Ar200-s Firmware Versionv200r005c20
   Huawei ≫ Ar200-s Version-
Huawei ≫ Ar200-s Firmware Versionv200r006c10
   Huawei ≫ Ar200-s Version-
Huawei ≫ Ar200-s Firmware Versionv200r007c00
   Huawei ≫ Ar200-s Version-
Huawei ≫ Ar200-s Firmware Versionv200r008c50
   Huawei ≫ Ar200-s Version-
Huawei ≫ Ar2200 Firmware Versionv200r005c20
   Huawei ≫ Ar2200 Version-
Huawei ≫ Ar2200 Firmware Versionv200r006c10
   Huawei ≫ Ar2200 Version-
Huawei ≫ Ar2200 Firmware Versionv200r007c00
   Huawei ≫ Ar2200 Version-
Huawei ≫ Ar2200 Firmware Versionv200r008c50
   Huawei ≫ Ar2200 Version-
Huawei ≫ Ar2200-s Firmware Versionv200r005c20
   Huawei ≫ Ar2200-s Version-
Huawei ≫ Ar2200-s Firmware Versionv200r006c10
   Huawei ≫ Ar2200-s Version-
Huawei ≫ Ar2200-s Firmware Versionv200r007c00
   Huawei ≫ Ar2200-s Version-
Huawei ≫ Ar2200-s Firmware Versionv200r008c50
   Huawei ≫ Ar2200-s Version-
Huawei ≫ Ar3200 Firmware Versionv200r005c20
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r006c10
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r007c00
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3200 Firmware Versionv200r008c50
   Huawei ≫ Ar3200 Version-
Huawei ≫ Ar3600 Firmware Versionv200r006c10
   Huawei ≫ Ar3600 Version-
Huawei ≫ Ar3600 Firmware Versionv200r007c00
   Huawei ≫ Ar3600 Version-
Huawei ≫ Ar3600 Firmware Versionv200r008c50
   Huawei ≫ Ar3600 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c10
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Cloudengine 12800 Firmware Versionv200r002c20
   Huawei ≫ Cloudengine 12800 Version-
Huawei ≫ Netengine16ex Firmware Versionv200r005c20
   Huawei ≫ Netengine16ex Version-
Huawei ≫ Netengine16ex Firmware Versionv200r006c10
   Huawei ≫ Netengine16ex Version-
Huawei ≫ Netengine16ex Firmware Versionv200r007c00
   Huawei ≫ Netengine16ex Version-
Huawei ≫ Netengine16ex Firmware Versionv200r008c50
   Huawei ≫ Netengine16ex Version-
Huawei ≫ S6700 Firmware Versionv200r008c00
   Huawei ≫ S6700 Version-
Huawei ≫ S6700 Firmware Versionv200r010c00spc300
   Huawei ≫ S6700 Version-
Huawei ≫ S6700 Firmware Versionv200r010c00spc600
   Huawei ≫ S6700 Version-
Huawei ≫ S6700 Firmware Versionv200r011c00spc200
   Huawei ≫ S6700 Version-
Huawei ≫ Srg1300 Firmware Versionv200r005c20
   Huawei ≫ Srg1300 Version-
Huawei ≫ Srg1300 Firmware Versionv200r006c10
   Huawei ≫ Srg1300 Version-
Huawei ≫ Srg1300 Firmware Versionv200r007c00
   Huawei ≫ Srg1300 Version-
Huawei ≫ Srg1300 Firmware Versionv200r008c50
   Huawei ≫ Srg1300 Version-
Huawei ≫ Srg2300 Firmware Versionv200r005c20
   Huawei ≫ Srg2300 Version-
Huawei ≫ Srg2300 Firmware Versionv200r006c10
   Huawei ≫ Srg2300 Version-
Huawei ≫ Srg2300 Firmware Versionv200r007c00
   Huawei ≫ Srg2300 Version-
Huawei ≫ Srg2300 Firmware Versionv200r008c50
   Huawei ≫ Srg2300 Version-
Huawei ≫ Srg3300 Firmware Versionv200r005c20
   Huawei ≫ Srg3300 Version-
Huawei ≫ Srg3300 Firmware Versionv200r006c10
   Huawei ≫ Srg3300 Version-
Huawei ≫ Srg3300 Firmware Versionv200r007c00
   Huawei ≫ Srg3300 Version-
Huawei ≫ Srg3300 Firmware Versionv200r008c50
   Huawei ≫ Srg3300 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.22% 0.449
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.