NetSight
medium5.5

CVE-2019-5257

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management v…

Impact

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network.

Affected products

VendorProductAffected versions
HuaweiAp2000 Firmware
Versions v200r005c30, v200r006c10, v200r006c20, v200r007c10, v200r007c20, v200r008c00
HuaweiIps Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNgfw Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20
HuaweiNip6300 Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNip6600 Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNip6800 Firmware
Versions v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00
HuaweiS5700 Firmware
Version v200r005c03
HuaweiSvn5600 Firmware
Version v200r003c00spc100
HuaweiSvn5800 Firmware
Version v200r003c00spc100
HuaweiSvn5800-C Firmware
Version v200r003c00spc100
HuaweiSemg9811 Firmware
Versions v500r002c20, v500r002c30, v500r005c00
HuaweiSecospace Antiddos8000 Firmware
Versions v500r001c00, v500r001c00spc200, v500r001c00spc300, v500r001c00spc500, v500r001c00spc600, v500r001c00spc700

Weakness classification

References