MEDIUM
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability
Published Dec 13, 2019
5.5
MEDIUMCVSS 3.1
EPSS 0.20%
Description
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network.
Affected products
No data.
Configuration 1
AND
OR
- v200r005c30
- v200r006c10
- v200r006c20
- v200r007c10
- v200r007c20
- v200r008c00
- v200r008c10
- v200r009c00
Configuration 2
AND
OR
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r005c00
Configuration 3
AND
OR
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00spc500pwe
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r002c00
- v500r002c00spc100
- v500r002c00spc100pwe
- v500r002c00spc200
- v500r002c00spc200pwe
- v500r002c00spc300
- v500r002c10
- v500r002c10pwe
- v500r002c30
- v500r002c30pwe
- v500r005c00
Configuration 4
AND
OR
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r005c00
Configuration 5
AND
OR
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r005c00
Configuration 6
AND
OR
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r005c00
Configuration 7
AND
- v200r005c03
Configuration 8
AND
- v200r003c00spc100
Configuration 9
AND
- v200r003c00spc100
Configuration 10
AND
- v200r003c00spc100
Configuration 11
AND
OR
- v500r002c20
- v500r002c30
- v500r005c00
Configuration 12
AND
OR
- v500r001c00
- v500r001c00spc200
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00spc600
- v500r001c00spc700
- v500r001c00sph303
- v500r001c20spc200
- v500r001c20spc300
- v500r001c20spc500
- v500r001c20spc600
- v500r001c60spc100
- v500r001c60spc101
- v500r001c60spc200
- v500r001c60spc300
- v500r001c60spc500
- v500r001c60spc600
- v500r005c00
- v500r005c00spc100
Running on/with
- n/a
Configuration 13
AND
OR
- v100r001c20spc100
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00spc500pwe
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc101
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r001c80pwe
- v500r005c00
Running on/with
- n/a
Configuration 14
AND
OR
- v100r001c20spc100
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00spc500pwe
- v500r001c00sph303
- v500r001c00sph508
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc101
- v500r001c20spc200
- v500r001c20spc200b062
- v500r001c20spc200pwe
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c50
- v500r001c50pwe
- v500r001c80
- v500r001c80pwe
- v500r005c00
Running on/with
- n/a
Configuration 15
AND
OR
- v100r001c00spc200
- v100r001c10spc200
- v100r001c10spc201
- v100r001c20spc100
- v100r001c20spc200
- v500r001c00
- v500r001c00spc050
- v500r001c00spc090
- v500r001c00spc300
- v500r001c00spc500
- v500r001c00spc500pwe
- v500r001c00sph303
- v500r001c20
- v500r001c20spc100
- v500r001c20spc100pwe
- v500r001c20spc101
- v500r001c20spc200
- v500r001c20spc200pwe
- v500r001c20spc300
- v500r001c20spc300b078
- v500r001c20spc300pwe
- v500r001c30
- v500r001c30spc100
- v500r001c30spc100pwe
- v500r001c30spc200
- v500r001c30spc200pwe
- v500r001c30spc300
- v500r001c30spc500
- v500r001c30spc600
- v500r001c30spc600pwe
- v500r001c30spc601
- v500r001c50
- v500r001c50pwe
- v500r001c50spc009
- v500r001c50spc100
- v500r001c50spc100pwe
- v500r001c50spc200
- v500r001c50spc200pwe
- v500r001c50spc300
- v500r001c60
- v500r001c60spc100
- v500r001c60spc100pwe
- v500r001c60spc200
- v500r001c60spc200pwe
- v500r001c60spc300
- v500r001c60spc500
- v500r001c80
- v500r001c80pwe
- v500r005c00
- v500r005c00spc100
- v500r005c00spc102
Running on/with
- n/a
Configuration 16
AND
OR
- v500r001c10
- v500r001c10spc100
- v500r001c10spc200
- v500r001c20
- v500r001c20spc100
- v500r001c20spc200
- v500r001c20spc300
- v500r001c20spc500
- v500r001c20spc600
- v500r003c00
- v500r003c00spc100
- v500r005c00
- v500r005c00spc100
Configuration 17
AND
- v200r003c50spc700
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (1)
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner huawei
Published Dec 13, 2019
Updated Aug 4, 2024
Reserved Jan 4, 2019
Link CVE-2019-5257
CISA Vulnrichment
Updated n/a