PT-2019-17562 · Huawei · Huawei+1

Publicado 2019-12-04 · Atualizado 2019-12-19 · CVE-2019-5291

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei products (affected versions not specified)

Description The issue is related to insufficient verification of data authenticity. A remote, unauthenticated attacker can intercept specific packets between two devices, modify them, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit this to cause the target device to become abnormal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2019-5291

Produtos afetados

Huawei

Huawei Vrp

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5291 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5291 · Aviso do Fabricante