CVE-2019-5259

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2019-12-16

Last modified

2024-08-04

Weaknesses

CWE-269

Affected products

• Ar120-s Firmware (Huawei)
• Ar1200-s Firmware (Huawei)
• Ar1200 Firmware (Huawei)
• Ar150-s Firmware (Huawei)
• Ar150 Firmware (Huawei)
• Ar160 Firmware (Huawei)
• Ar200-s Firmware (Huawei)
• Ar200 Firmware (Huawei)
• Ar2200-s Firmware (Huawei)
• Ar2200 Firmware (Huawei)
• Ar3200 Firmware (Huawei)
• Ar3600 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-en