high7.5
CVE-2019-19415
The SIP module of some Huawei products have a denial of service (DoS) vulnerability.
Impact
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar120-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar1200 Firmware | Versions v200r006c10, v200r006c13, v200r007c00, v200r007c01, v200r007c02, v200r008c20 |
| Huawei | Ar1200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar150 Firmware | Versions v200r006c10, v200r007c00, v200r007c01, v200r007c02, v200r008c20, v200r008c30 |
| Huawei | Ar150-S Firmware | Versions v200r006c10spc300, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar160 Firmware | Versions v200r006c10, v200r006c12, v200r007c00, v200r007c01, v200r007c02, v200r008c20 |
| Huawei | Ar200 Firmware | Versions v200r006c10, v200r007c00, v200r007c01, v200r008c20, v200r008c30 |
| Huawei | Ar200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar2200 Firmware | Versions v200r006c10, v200r006c13, v200r006c16pwe, v200r007c00, v200r007c01, v200r007c02 |
| Huawei | Ar2200-S Firmware | Versions v200r006c10, v200r007c00, v200r008c20, v200r008c30 |
| Huawei | Ar3200 Firmware | Versions v200r006c10, v200r006c11, v200r007c00, v200r007c01, v200r007c02, v200r008c00 |
| Huawei | Ar3600 Firmware | Versions v200r006c10, v200r007c00, v200r007c01, v200r008c20 |