medium5.5
CVE-2019-5256
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG630…
Impact
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this vulnerability by sending crafted parameters. A successful exploit could cause a denial of service and the process reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ap2000 Firmware | Versions v200r005c30, v200r006c10, v200r006c20, v200r007c10, v200r007c20, v200r008c00 |
| Huawei | Ips Firmware | Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 |
| Huawei | Ngfw Firmware | Versions v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20 |
| Huawei | Nip6300 Firmware | Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 |
| Huawei | Nip6600 Firmware | Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 |
| Huawei | Nip6800 Firmware | Versions v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00 |
| Huawei | S5700 Firmware | Version v200r005c03 |
| Huawei | Svn5600 Firmware | Version v200r003c00spc100 |
| Huawei | Svn5800 Firmware | Version v200r003c00spc100 |
| Huawei | Svn5800-C Firmware | Version v200r003c00spc100 |
| Huawei | Semg9811 Firmware | Versions v500r002c20, v500r002c30, v500r005c00 |
| Huawei | Secospace Antiddos8000 Firmware | Versions v500r001c00, v500r001c00spc200, v500r001c00spc300, v500r001c00spc500, v500r001c00spc600, v500r001c00spc700 |