CVEvulnerability

CVE-2019-5304

7.5 HIGH Published 2020-01-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-120

Description

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Affected configurations

• huawei ar120-s firmware v200r006c10 • huawei ar120-s firmware v200r007c00 • huawei ar120-s firmware v200r008c20 • huawei ar120-s firmware v200r008c50 • huawei ar1200 firmware v200r003c01 • huawei ar1200 firmware v200r005c20 • huawei ar1200 firmware v200r006c10 • huawei ar1200 firmware v200r007c00 • huawei ar1200 firmware v200r008c20 • huawei ar1200 firmware v200r008c50 • huawei ar1200-s firmware v200r003c01 • huawei ar1200-s firmware v200r005c20 • huawei ar1200-s firmware v200r006c10 • huawei ar1200-s firmware v200r007c00 • huawei ar1200-s firmware v200r008c20 • huawei ar1200-s firmware v200r008c50 • huawei ar150 firmware v200r003c01 • huawei ar150 firmware v200r005c20 • huawei ar150 firmware v200r006c10 • huawei ar150 firmware v200r007c00 • huawei ar150 firmware v200r008c20 • huawei ar150 firmware v200r008c50 • huawei ar150-s firmware v200r003c01 • huawei ar150-s firmware v200r005c20 • huawei ar150-s firmware v200r006c10 • huawei ar150-s firmware v200r007c00 • huawei ar150-s firmware v200r008c20 • huawei ar150-s firmware v200r008c50 • huawei ar160 firmware v200r005c20 • huawei ar160 firmware v200r006c10 • huawei ar160 firmware v200r007c00 • huawei ar160 firmware v200r008c20 • huawei ar160 firmware v200r008c50 • huawei ar200 firmware v200r003c01 • huawei ar200 firmware v200r005c20 • huawei ar200 firmware v200r006c10 • huawei ar200 firmware v200r007c00 • huawei ar200 firmware v200r008c20 • huawei ar200 firmware v200r008c50 • huawei ar200-s firmware v200r003c01 • huawei ar200-s firmware v200r005c20 • huawei ar200-s firmware v200r006c10 • huawei ar200-s firmware v200r007c00 • huawei ar200-s firmware v200r008c20 • huawei ar200-s firmware v200r008c50 • huawei ar2200 firmware v200r003c01 • huawei ar2200 firmware v200r005c20 • huawei ar2200 firmware v200r006c10 • huawei ar2200 firmware v200r007c00 • huawei ar2200 firmware v200r008c20 • huawei ar2200 firmware v200r008c50 • huawei ar2200-s firmware v200r003c01 • huawei ar2200-s firmware v200r005c20 • huawei ar2200-s firmware v200r006c10 • huawei ar2200-s firmware v200r008c20 • huawei ar2200-s firmware v200r008c50 • huawei ar3200 firmware v200r003c01 • huawei ar3200 firmware v200r005c20 • huawei ar3200 firmware v200r006c10 • huawei ar3200 firmware v200r007c00 … and 60 more

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References