CVE-2019-5298 - There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800

Back Back to CVE browser

MEDIUM

There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800

Published Jun 4, 2019

6.8

MEDIUM

CVSS 3.0

EPSS 0.27%

Description

There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of commands.

Affected products

Vendor Huawei Product Ap4050dn-E Default
unknown
Affected
- V200R009C00

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Huawei	Ap4050dn-E	unknown	Affected V200R009C00

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14903
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-14903		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jun 4, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5298

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5298

Red Hat

No data

ENISA EUVD

Assigner huawei

Published Jun 4, 2019

Updated Aug 4, 2024

Link EUVD-2019-14903

GitHub

No data