medium5.9
CVE-2019-5291
Some Huawei products have an insufficient verification of data authenticity vulnerability.
Impact
Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar120-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar1200 Firmware | Versions v200r005c00, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar1200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar150 Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar150-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar160 Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar2200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar2200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar3200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00, v200r008c50 |
| Huawei | Ar3600 Firmware | Versions v200r006c10, v200r007c00, v200r008c50 |