Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-5304

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficie

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600

  • V200R006C10affected
  • V200R007C00affected
  • V200R008C20affected
  • V200R008C50affected
  • V200R003C01affected
  • V200R005C20affected
  • V500R001C20affected
  • V500R001C30affected
  • V500R002C00affected
  • V200R005C00affected
  • V200R005C02affected
  • V200R005C03affected
  • V200R006C00affected
  • V200R008C00affected
  • V200R010C00affected
  • V200R011C00affected
  • V200R005C01affected
  • V500R001C60affected
  • V500R005C00affected

References