6.5

CVE-2019-5293

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Version v200r005c20
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r006c10
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar1200 Firmware Version v200r005c20
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r006c10
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200-s Firmware Version v200r005c20
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r006c10
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar150 Firmware Version v200r005c20
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r006c10
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150-s Firmware Version v200r005c20
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r006c10
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar160 Firmware Version v200r005c20
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r006c10
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar200 Firmware Version v200r005c20
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r006c10
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200-s Firmware Version v200r005c20
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r006c10
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar2200 Firmware Version v200r005c20
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r006c10
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200-s Firmware Version v200r005c20
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r006c10
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar3200 Firmware Version v200r005c20
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r006c10
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3600 Firmware Version v200r006c10
   Huawei ≫ Ar3600 Version -
Huawei ≫ Netengine16ex Firmware Version v200r005c20
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r006c10
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Srg1300 Firmware Version v200r005c20
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r006c10
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg2300 Firmware Version v200r005c20
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r006c10
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg3300 Firmware Version v200r005c20
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r006c10
   Huawei ≫ Srg3300 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.87% 0.543
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en
Vendor Advisory