Lucene search

Huawei TechnologiesHUAWEI-SA-20191204-01-VALIDATION

HistoryDec 04, 2019 - 12:00 a.m.

Security Advisory - Insufficient Verification of Data Authenticity Vulnerability in Some Huawei Products

2019-12-0400:00:00

Huawei Technologies

www.huawei.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

58.8%

JSON

Some Huawei products has an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modifies the packets, and sends the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device abnormal. (Vulnerability ID: HWPSIRT-2019-04076)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5291.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en

Affected configurations

Vulners

Node

huaweiar120-s_firmwareMatchv200r005c20

huaweiar120-s_firmwareMatchv200r006c10

huaweiar120-s_firmwareMatchv200r007c00

huaweiar120-s_firmwareMatchv200r008c50

huaweiar1200_firmwareMatchv200r005c00

huaweiar1200_firmwareMatchv200r006c10

huaweiar1200_firmwareMatchv200r007c00

huaweiar1200_firmwareMatchv200r008c50

huaweiar1200-s_firmwareMatchv200r005c20

huaweiar1200-s_firmwareMatchv200r006c10

huaweiar1200-s_firmwareMatchv200r007c00

huaweiar1200-s_firmwareMatchv200r008c50

huaweiar150_firmwareMatchv200r005c20

huaweiar150_firmwareMatchv200r006c10

huaweiar150_firmwareMatchv200r007c00

huaweiar150_firmwareMatchv200r008c50

huaweiar150-s_firmwareMatchv200r005c20

huaweiar150-s_firmwareMatchv200r006c10

huaweiar150-s_firmwareMatchv200r007c00

huaweiar150-s_firmwareMatchv200r008c50

huaweiar160_firmwareMatchv200r005c20

huaweiar160_firmwareMatchv200r006c10

huaweiar160_firmwareMatchv200r007c00

huaweiar160_firmwareMatchv200r008c50

huaweiar200_firmwareMatchv200r005c20

huaweiar200_firmwareMatchv200r006c10

huaweiar200_firmwareMatchv200r007c00

huaweiar200_firmwareMatchv200r008c50

huaweiar200-s_firmwareMatchv200r005c20

huaweiar200-s_firmwareMatchv200r006c10

huaweiar200-s_firmwareMatchv200r007c00

huaweiar200-s_firmwareMatchv200r008c50

huaweiar2200_firmwareMatchv200r005c20

huaweiar2200_firmwareMatchv200r006c10

huaweiar2200_firmwareMatchv200r007c00

huaweiar2200_firmwareMatchv200r008c50

huaweiar2200-s_firmwareMatchv200r005c20

huaweiar2200-s_firmwareMatchv200r006c10

huaweiar2200-s_firmwareMatchv200r007c00

huaweiar2200-s_firmwareMatchv200r008c50

huaweiar3200_firmwareMatchv200r005c20

huaweiar3200_firmwareMatchv200r006c10

huaweiar3200_firmwareMatchv200r007c00

huaweiar3200_firmwareMatchv200r008c50

huaweiar3600_firmwareMatchv200r006c10

huaweiar3600_firmwareMatchv200r007c00

huaweiar3600_firmwareMatchv200r008c50

huaweicloudengine_12800_firmwareMatchv200r002c10

huaweicloudengine_12800_firmwareMatchv200r002c20

huaweiips_module_firmwareMatchv500r001c30spc100

huaweiips_module_firmwareMatchv500r001c30spc100pwe

huaweiips_module_firmwareMatchv500r001c30spc200

huaweingfw_module_firmwareMatchv500r002c00spc200

huaweinip6300_firmwareMatchv500r001c30spc100

huaweinip6300_firmwareMatchv500r001c30spc200

huaweinip6600_firmwareMatchv500r001c30spc100

huaweinip6600_firmwareMatchv500r001c30spc200

huaweinetengine16ex_firmwareMatchv200r005c20

huaweinetengine16ex_firmwareMatchv200r006c10

huaweinetengine16ex_firmwareMatchv200r007c00

huaweinetengine16ex_firmwareMatchv200r008c50

huaweis6700_firmwareMatchv200r008c00

huaweis6700_firmwareMatchv200r010c00spc300

huaweis6700_firmwareMatchv200r010c00spc600

huaweis6700_firmwareMatchv200r011c00spc200

huaweisrg1300_firmwareMatchv200r005c20

huaweisrg1300_firmwareMatchv200r006c10

huaweisrg1300_firmwareMatchv200r007c00

huaweisrg1300_firmwareMatchv200r008c50

huaweisrg2300_firmwareMatchv200r005c20

huaweisrg2300_firmwareMatchv200r006c10

huaweisrg2300_firmwareMatchv200r007c00

huaweisrg2300_firmwareMatchv200r008c50

huaweisrg3300_firmwareMatchv200r005c20

huaweisrg3300_firmwareMatchv200r006c10

huaweisrg3300_firmwareMatchv200r007c00

huaweisrg3300_firmwareMatchv200r008c50

huaweisecospace_antiddos8000_firmwareMatchv500r001c20spc200

huaweisecospace_antiddos8000_firmwareMatchv500r001c20spc300

huaweisecospace_antiddos8000_firmwareMatchv500r001c20spc500

huaweisecospace_antiddos8000_firmwareMatchv500r001c20spc600

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc100

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc101

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc200

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc300

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc500

huaweisecospace_antiddos8000_firmwareMatchv500r001c60spc600

huaweisecospace_antiddos8000_firmwareMatchv500r005c00spc100

huaweisecospace_antiddos8000_firmwareMatchv500r005c00spc200

huaweisecospace_usg6300_firmwareMatchv500r001c30spc100

huaweisecospace_usg6300_firmwareMatchv500r001c30spc200

huaweisecospace_usg6500_firmwareMatchv500r001c30spc100

huaweisecospace_usg6500_firmwareMatchv500r001c30spc200

huaweisecospace_usg6600_firmwareMatchv500r001c30spc100

huaweisecospace_usg6600_firmwareMatchv500r001c30spc200

VendorProductVersionCPE
huaweiar120-s_firmwarev200r005c20cpe:2.3:o:huawei:ar120-s_firmware:v200r005c20:*:*:*:*:*:*:*
huaweiar120-s_firmwarev200r006c10cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*
huaweiar120-s_firmwarev200r007c00cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*
huaweiar120-s_firmwarev200r008c50cpe:2.3:o:huawei:ar120-s_firmware:v200r008c50:*:*:*:*:*:*:*
huaweiar1200_firmwarev200r005c00cpe:2.3:o:huawei:ar1200_firmware:v200r005c00:*:*:*:*:*:*:*
huaweiar1200_firmwarev200r006c10cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*
huaweiar1200_firmwarev200r007c00cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*
huaweiar1200_firmwarev200r008c50cpe:2.3:o:huawei:ar1200_firmware:v200r008c50:*:*:*:*:*:*:*
huaweiar1200-s_firmwarev200r005c20cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c20:*:*:*:*:*:*:*
huaweiar1200-s_firmwarev200r006c10cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	ar120-s_firmware	v200r005c20	cpe:2.3:o:huawei:ar120-s_firmware:v200r005c20:::::::*
huawei	ar120-s_firmware	v200r006c10	cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:::::::*
huawei	ar120-s_firmware	v200r007c00	cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:::::::*
huawei	ar120-s_firmware	v200r008c50	cpe:2.3:o:huawei:ar120-s_firmware:v200r008c50:::::::*
huawei	ar1200_firmware	v200r005c00	cpe:2.3:o:huawei:ar1200_firmware:v200r005c00:::::::*
huawei	ar1200_firmware	v200r006c10	cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:::::::*
huawei	ar1200_firmware	v200r007c00	cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:::::::*
huawei	ar1200_firmware	v200r008c50	cpe:2.3:o:huawei:ar1200_firmware:v200r008c50:::::::*
huawei	ar1200-s_firmware	v200r005c20	cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c20:::::::*
huawei	ar1200-s_firmware	v200r006c10	cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:::::::*

Rows per page:

1-10 of 951

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

58.8%

JSON

Related for HUAWEI-SA-20191204-01-VALIDATION