high7.5
CVE-2019-5294
There is an out of bound read vulnerability in some Huawei products.
Impact
There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Ar120-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar1200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar1200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar150 Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar150-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar160 Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar2200 Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar2200-S Firmware | Versions v200r005c20, v200r006c10, v200r007c00 |
| Huawei | Ar3200 Firmware | Versions v200r005c20, v200r006c10 |
| Huawei | Ar3600 Firmware | Versions v200r006c10, v200r007c00 |