PT-2019-2591 · Huawei · Huawei S Series Switches+1

Eack · Publicado 2019-05-22 · Atualizado 2019-07-26 · CVE-2019-5285

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei S series switches (affected versions not specified)

Description The issue is related to insufficient verification of input packets, allowing an unauthenticated remote attacker to send crafted packets and exploit the vulnerability. Successful exploitation may cause the device to reboot and result in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-02471

CVE-2019-5285

Produtos afetados

Huawei S Series Switches

Huawei Vrp

Referências · 5

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5285 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5285 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02471 · Nota de Segurança