NetSight
IP …
medium5.5

CVE-2019-5258

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG630…

Impact

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Affected products

VendorProductAffected versions
HuaweiAp2000 Firmware
Versions v200r005c30, v200r006c10, v200r006c20, v200r007c10, v200r007c20, v200r008c00
HuaweiIps Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNgfw Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20
HuaweiNip6300 Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNip6600 Firmware
Versions v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100
HuaweiNip6800 Firmware
Versions v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00
HuaweiS5700 Firmware
Version v200r005c03
HuaweiSvn5600 Firmware
Version v200r003c00spc100
HuaweiSvn5800 Firmware
Version v200r003c00spc100
HuaweiSvn5800-C Firmware
Version v200r003c00spc100
HuaweiSemg9811 Firmware
Versions v500r002c20, v500r002c30, v500r005c00
HuaweiSecospace Antiddos8000 Firmware
Versions v500r001c00, v500r001c00spc200, v500r001c00spc300, v500r001c00spc500, v500r001c00spc600, v500r001c00spc700

Weakness classification

CWE-120

References