Lucene search

Huawei TechnologiesHUAWEI-SA-20190522-01-SWITCH

HistoryMay 22, 2019 - 12:00 a.m.

Security Advisory - DoS Vulnerability in Huawei S Series Switch Products

2019-05-2200:00:00

Huawei Technologies

www.huawei.com

115

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

64.5%

JSON

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition.(Vulnerability ID: HWPSIRT-2019-03191)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5285.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en

Affected configurations

Vulners

Node

huaweis12700_firmwareMatchv200r005c00

huaweis12700_firmwareMatchv200r006c00

huaweis12700_firmwareMatchv200r007c00

huaweis12700_firmwareMatchv200r008c00

huaweis12700_firmwareMatchv200r010c00

huaweis12700_firmwareMatchv200r012c00

huaweis12700_firmwareMatchv200r013c00

huaweis12700_firmwareMatchv200r011c10

huaweis1700_firmwareMatchv200r008c00

huaweis1700_firmwareMatchv200r009c00

huaweis1700_firmwareMatchv200r010c00

huaweis1700_firmwareMatchv200r011c10

huaweis1700_firmwareMatchv200r012c00

huaweis1700_firmwareMatchv200r013c00

huaweis2300_firmwareMatchv200r003c00

huaweis2300_firmwareMatchv200r005c00

huaweis2300_firmwareMatchv200r008c00

huaweis2300_firmwareMatchv200r010c00

huaweis2300_firmwareMatchv200r011c10

huaweis2300_firmwareMatchv200r012c00

huaweis2300_firmwareMatchv200r013c00

huaweis2700_firmwareMatchv200r005c00

huaweis2700_firmwareMatchv200r006c00

huaweis2700_firmwareMatchv200r007c00

huaweis2700_firmwareMatchv200r008c00

huaweis2700_firmwareMatchv200r010c00

huaweis2700_firmwareMatchv200r011c10

huaweis2700_firmwareMatchv200r012c00

huaweis2700_firmwareMatchv200r013c00

huaweis5300_firmwareMatchv200r003c00

huaweis5300_firmwareMatchv200r005c00

huaweis5300_firmwareMatchv200r008c00

huaweis5300_firmwareMatchv200r010c00

huaweis5300_firmwareMatchv200r011c10

huaweis5300_firmwareMatchv200r012c00

huaweis5300_firmwareMatchv200r013c00

huaweis5700_firmwareMatchv200r003c00

huaweis5700_firmwareMatchv200r005c00

huaweis5700_firmwareMatchv200r006c00

huaweis5700_firmwareMatchv200r007c00

huaweis5700_firmwareMatchv200r008c00

huaweis5700_firmwareMatchv200r010c00

huaweis5700_firmwareMatchv200r011c10

huaweis5700_firmwareMatchv200r012c00

huaweis5700_firmwareMatchv200r013c00

huaweis600-e_firmwareMatchv200r008c00

huaweis600-e_firmwareMatchv200r010c00

huaweis600-e_firmwareMatchv200r011c10

huaweis600-e_firmwareMatchv200r012c00

huaweis600-e_firmwareMatchv200r013c00

huaweis6300_firmwareMatchv200r003c00

huaweis6300_firmwareMatchv200r005c00

huaweis6300_firmwareMatchv200r007c00

huaweis6300_firmwareMatchv200r008c00

huaweis6300_firmwareMatchv200r010c00

huaweis6300_firmwareMatchv200r011c10

huaweis6300_firmwareMatchv200r012c00

huaweis6300_firmwareMatchv200r013c00

huaweis6700_firmwareMatchv200r003c00

huaweis6700_firmwareMatchv200r005c00

huaweis6700_firmwareMatchv200r007c00

huaweis6700_firmwareMatchv200r008c00

huaweis6700_firmwareMatchv200r010c00

huaweis6700_firmwareMatchv200r011c10

huaweis6700_firmwareMatchv200r012c00

huaweis6700_firmwareMatchv200r013c00

huaweis7700_firmwareMatchv200r003c00

huaweis7700_firmwareMatchv200r005c00

huaweis7700_firmwareMatchv200r006c00

huaweis7700_firmwareMatchv200r007c00

huaweis7700_firmwareMatchv200r008c00

huaweis7700_firmwareMatchv200r010c00

huaweis7700_firmwareMatchv200r011c10

huaweis7700_firmwareMatchv200r012c00

huaweis7700_firmwareMatchv200r013c00

huaweis7900_firmwareMatchv200r011c10

huaweis7900_firmwareMatchv200r012c00

huaweis7900_firmwareMatchv200r013c00

huaweis9300_firmwareMatchv200r003c00

huaweis9300_firmwareMatchv200r008c00

huaweis9300_firmwareMatchv200r008c10

huaweis9300_firmwareMatchv200r010c00

huaweis9300_firmwareMatchv200r011c10

huaweis9300_firmwareMatchv200r012c00

huaweis9300_firmwareMatchv200r013c00

huaweis9300x_firmwareMatchv200r010c00

huaweis9300x_firmwareMatchv200r011c10

huaweis9300x_firmwareMatchv200r012c00

huaweis9300x_firmwareMatchv200r013c00

huaweis9700_firmwareMatchv200r003c00

huaweis9700_firmwareMatchv200r005c00

huaweis9700_firmwareMatchv200r006c00

huaweis9700_firmwareMatchv200r007c00

huaweis9700_firmwareMatchv200r008c00

huaweis9700_firmwareMatchv200r010c00

huaweis9700_firmwareMatchv200r011c10

huaweis9700_firmwareMatchv200r012c00

huaweis9700_firmwareMatchv200r013c00

VendorProductVersionCPE
huaweis12700_firmwarev200r005c00cpe:2.3:o:huawei:s12700_firmware:v200r005c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r006c00cpe:2.3:o:huawei:s12700_firmware:v200r006c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r007c00cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r008c00cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r010c00cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r012c00cpe:2.3:o:huawei:s12700_firmware:v200r012c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r013c00cpe:2.3:o:huawei:s12700_firmware:v200r013c00:*:*:*:*:*:*:*
huaweis12700_firmwarev200r011c10cpe:2.3:o:huawei:s12700_firmware:v200r011c10:*:*:*:*:*:*:*
huaweis1700_firmwarev200r008c00cpe:2.3:o:huawei:s1700_firmware:v200r008c00:*:*:*:*:*:*:*
huaweis1700_firmwarev200r009c00cpe:2.3:o:huawei:s1700_firmware:v200r009c00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	s12700_firmware	v200r005c00	cpe:2.3:o:huawei:s12700_firmware:v200r005c00:::::::*
huawei	s12700_firmware	v200r006c00	cpe:2.3:o:huawei:s12700_firmware:v200r006c00:::::::*
huawei	s12700_firmware	v200r007c00	cpe:2.3:o:huawei:s12700_firmware:v200r007c00:::::::*
huawei	s12700_firmware	v200r008c00	cpe:2.3:o:huawei:s12700_firmware:v200r008c00:::::::*
huawei	s12700_firmware	v200r010c00	cpe:2.3:o:huawei:s12700_firmware:v200r010c00:::::::*
huawei	s12700_firmware	v200r012c00	cpe:2.3:o:huawei:s12700_firmware:v200r012c00:::::::*
huawei	s12700_firmware	v200r013c00	cpe:2.3:o:huawei:s12700_firmware:v200r013c00:::::::*
huawei	s12700_firmware	v200r011c10	cpe:2.3:o:huawei:s12700_firmware:v200r011c10:::::::*
huawei	s1700_firmware	v200r008c00	cpe:2.3:o:huawei:s1700_firmware:v200r008c00:::::::*
huawei	s1700_firmware	v200r009c00	cpe:2.3:o:huawei:s1700_firmware:v200r009c00:::::::*

Rows per page:

1-10 of 981

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

64.5%

JSON

Related for HUAWEI-SA-20190522-01-SWITCH