PT-2019-17531 · Huawei · Cloudengine 12800+1

Publicado 2019-12-04 · Atualizado 2021-07-21 · CVE-2019-5248

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CloudEngine 12800 (affected versions not specified) Some Huawei products (affected versions not specified)

Description The issue is related to a Denial of Service (DoS) vulnerability. An attacker from a neighboring device can send a large number of specific packets, resulting in a memory leak after the device processes these packets. This allows the attacker to exploit the issue and cause DoS attacks on the target device.

Recommendations For CloudEngine 12800, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Some Huawei products, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2019-5248

Produtos afetados

Cloudengine 12800

Huawei Vrp

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5248 · Nota de Segurança
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5248 · Aviso do Fabricante