CVE-2019-5275 - USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability

Back Back to CVE browser

HIGH

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability

Published Dec 26, 2019

7.5

HIGH

CVSS 3.1

EPSS 0.47%

Description

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial of service attack on the affected products.

Affected products

Vendor Huawei Product n/a Default
n/a
- Version
  V500R001C30
  Status
  affected
  Constraints
  -
- Version
  V500R001C60
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

n/a

Version	Status	Constraints
V500R001C30	affected	-
V500R001C60	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14880
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14880		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en		x_refsource_CONFIRMVendor Advisory