CVEvulnerability
CVE-2019-5291
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-345
Description
Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.
Affected configurations
• huawei ar120-s firmware v200r005c20
• huawei ar120-s firmware v200r006c10
• huawei ar120-s firmware v200r007c00
• huawei ar120-s firmware v200r008c50
• huawei ar1200 firmware v200r005c00
• huawei ar1200 firmware v200r006c10
• huawei ar1200 firmware v200r007c00
• huawei ar1200 firmware v200r008c50
• huawei ar1200-s firmware v200r005c20
• huawei ar1200-s firmware v200r006c10
• huawei ar1200-s firmware v200r007c00
• huawei ar1200-s firmware v200r008c50
• huawei ar150 firmware v200r005c20
• huawei ar150 firmware v200r006c10
• huawei ar150 firmware v200r007c00
• huawei ar150 firmware v200r008c50
• huawei ar150-s firmware v200r005c20
• huawei ar150-s firmware v200r006c10
• huawei ar150-s firmware v200r007c00
• huawei ar150-s firmware v200r008c50
• huawei ar160 firmware v200r005c20
• huawei ar160 firmware v200r006c10
• huawei ar160 firmware v200r007c00
• huawei ar160 firmware v200r008c50
• huawei ar200 firmware v200r005c20
• huawei ar200 firmware v200r006c10
• huawei ar200 firmware v200r007c00
• huawei ar200 firmware v200r008c50
• huawei ar200-s firmware v200r005c20
• huawei ar200-s firmware v200r006c10
• huawei ar200-s firmware v200r007c00
• huawei ar200-s firmware v200r008c50
• huawei ar2200 firmware v200r005c20
• huawei ar2200 firmware v200r006c10
• huawei ar2200 firmware v200r007c00
• huawei ar2200 firmware v200r008c50
• huawei ar2200-s firmware v200r005c20
• huawei ar2200-s firmware v200r006c10
• huawei ar2200-s firmware v200r007c00
• huawei ar2200-s firmware v200r008c50
• huawei ar3200 firmware v200r005c20
• huawei ar3200 firmware v200r006c10
• huawei ar3200 firmware v200r007c00
• huawei ar3200 firmware v200r008c50
• huawei ar3600 firmware v200r006c10
• huawei ar3600 firmware v200r007c00
• huawei ar3600 firmware v200r008c50
• huawei cloudengine 12800 firmware v200r002c10
• huawei cloudengine 12800 firmware v200r002c20
• huawei netengine16ex firmware v200r005c20
• huawei netengine16ex firmware v200r006c10
• huawei netengine16ex firmware v200r007c00
• huawei netengine16ex firmware v200r008c50
• huawei s6700 firmware v200r008c00
• huawei s6700 firmware v200r010c00spc300
• huawei s6700 firmware v200r010c00spc600
• huawei s6700 firmware v200r011c00spc200
• huawei srg1300 firmware v200r005c20
• huawei srg1300 firmware v200r006c10
• huawei srg1300 firmware v200r007c00
… and 9 more
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness