CVE-2019-5294
There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - psirt@huawei.com
- Published
- 2019-11-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-125
Affected products
- Ar120-s Firmware (Huawei)
- Ar1200-s Firmware (Huawei)
- Ar1200 Firmware (Huawei)
- Ar150-s Firmware (Huawei)
- Ar150 Firmware (Huawei)
- Ar160 Firmware (Huawei)
- Ar200-s Firmware (Huawei)
- Ar200 Firmware (Huawei)
- Ar2200-s Firmware (Huawei)
- Ar2200 Firmware (Huawei)
- Ar3200 Firmware (Huawei)
- Ar3600 Firmware (Huawei)
- Netengine16ex Firmware (Huawei)
- Srg1300 Firmware (Huawei)
- Srg2300 Firmware (Huawei)
- Srg3300 Firmware (Huawei)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-buffer-en
