7.8

CVE-2019-5304

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Ar120-s Firmware Version v200r006c10
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r007c00
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r008c20
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar120-s Firmware Version v200r008c50
   Huawei ≫ Ar120-s Version -
Huawei ≫ Ar1200 Firmware Version v200r003c01
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r005c20
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r006c10
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r007c00
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r008c20
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200 Firmware Version v200r008c50
   Huawei ≫ Ar1200 Version -
Huawei ≫ Ar1200-s Firmware Version v200r003c01
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r005c20
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r006c10
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r007c00
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r008c20
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar1200-s Firmware Version v200r008c50
   Huawei ≫ Ar1200-s Version -
Huawei ≫ Ar150 Firmware Version v200r003c01
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r005c20
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r006c10
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r007c00
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r008c20
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150 Firmware Version v200r008c50
   Huawei ≫ Ar150 Version -
Huawei ≫ Ar150-s Firmware Version v200r003c01
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r005c20
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r006c10
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r007c00
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r008c20
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar150-s Firmware Version v200r008c50
   Huawei ≫ Ar150-s Version -
Huawei ≫ Ar160 Firmware Version v200r005c20
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r006c10
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r007c00
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r008c20
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar160 Firmware Version v200r008c50
   Huawei ≫ Ar160 Version -
Huawei ≫ Ar200 Firmware Version v200r003c01
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r005c20
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r006c10
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r007c00
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r008c20
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200 Firmware Version v200r008c50
   Huawei ≫ Ar200 Version -
Huawei ≫ Ar200-s Firmware Version v200r003c01
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r005c20
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r006c10
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r007c00
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r008c20
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar200-s Firmware Version v200r008c50
   Huawei ≫ Ar200-s Version -
Huawei ≫ Ar2200 Firmware Version v200r003c01
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r005c20
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r006c10
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r007c00
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r008c20
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200 Firmware Version v200r008c50
   Huawei ≫ Ar2200 Version -
Huawei ≫ Ar2200-s Firmware Version v200r003c01
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r005c20
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r006c10
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r008c20
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar2200-s Firmware Version v200r008c50
   Huawei ≫ Ar2200-s Version -
Huawei ≫ Ar3200 Firmware Version v200r003c01
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r005c20
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r006c10
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r007c00
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r008c20
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3200 Firmware Version v200r008c50
   Huawei ≫ Ar3200 Version -
Huawei ≫ Ar3600 Firmware Version v200r006c10
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r007c00
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r008c20
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ar3600 Firmware Version v200r008c50
   Huawei ≫ Ar3600 Version -
Huawei ≫ Ips Module Firmware Version v500r001c20
   Huawei ≫ Ips Module Version -
Huawei ≫ Ips Module Firmware Version v500r001c30
   Huawei ≫ Ips Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r001c20
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Ngfw Module Firmware Version v500r002c00
   Huawei ≫ Ngfw Module Version -
Huawei ≫ Nip6300 Firmware Version v500r001c20
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6300 Firmware Version v500r001c30
   Huawei ≫ Nip6300 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c20
   Huawei ≫ Nip6600 Version -
Huawei ≫ Nip6600 Firmware Version v500r001c30
   Huawei ≫ Nip6600 Version -
Huawei ≫ Netengine16ex Firmware Version v200r005c20
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r006c10
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r007c00
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r008c20
   Huawei ≫ Netengine16ex Version -
Huawei ≫ Netengine16ex Firmware Version v200r008c50
   Huawei ≫ Netengine16ex Version -
Huawei ≫ S5700 Firmware Version v200r005c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c02
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r005c03
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r006c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r007c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r008c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r010c00
   Huawei ≫ S5700 Version -
Huawei ≫ S5700 Firmware Version v200r011c00
   Huawei ≫ S5700 Version -
Huawei ≫ S6700 Firmware Version v200r005c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c01
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r005c02
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r008c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r010c00
   Huawei ≫ S6700 Version -
Huawei ≫ S6700 Firmware Version v200r011c00
   Huawei ≫ S6700 Version -
Huawei ≫ Srg1300 Firmware Version v200r003c01
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r005c20
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r006c10
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r007c00
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r008c20
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg1300 Firmware Version v200r008c50
   Huawei ≫ Srg1300 Version -
Huawei ≫ Srg2300 Firmware Version v200r003c01
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r005c20
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r006c10
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r007c00
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r008c20
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg2300 Firmware Version v200r008c50
   Huawei ≫ Srg2300 Version -
Huawei ≫ Srg3300 Firmware Version v200r003c01
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r005c20
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r006c10
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r007c00
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r008c20
   Huawei ≫ Srg3300 Version -
Huawei ≫ Srg3300 Firmware Version v200r008c50
   Huawei ≫ Srg3300 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c20
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r001c60
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Antiddos8000 Firmware Version v500r005c00
   Huawei ≫ Secospace Antiddos8000 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6300 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6300 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6500 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6500 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c20
   Huawei ≫ Secospace Usg6600 Version -
Huawei ≫ Secospace Usg6600 Firmware Version v500r001c30
   Huawei ≫ Secospace Usg6600 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.573
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en
Vendor Advisory