CVE-2019-5285

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@huawei.com

Published

2019-06-04

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• S12700 (Huawei)
• S12700 Firmware (Huawei)
• S1700 (Huawei)
• S1700 Firmware (Huawei)
• S2300 (Huawei)
• S2300 Firmware (Huawei)
• S2700 (Huawei)
• S2700 Firmware (Huawei)
• S5300 (Huawei)
• S5300 Firmware (Huawei)
• S5700 (Huawei)
• S5700 Firmware (Huawei)
• S600-e (Huawei)
• S600-e Firmware (Huawei)
• S6300 (Huawei)
• S6300 Firmware (Huawei)
• S6700 (Huawei)
• S6700 Firmware (Huawei)
• S7700 (Huawei)
• S7700 Firmware (Huawei)
• S7900 (Huawei)
• S7900 Firmware (Huawei)
• S9300 (Huawei)
• S9300 Firmware (Huawei)
• S9300x (Huawei)
• S9300x Firmware (Huawei)
• S9700 (Huawei)
• S9700 Firmware (Huawei)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en