PT-2019-4440 · Huawei · Huawei Ap4050Dn-E+2

Publicado 2019-03-27 · Atualizado 2019-06-05 · CVE-2019-5298

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei AP2000 versions prior to V200R009C00SPC800 Huawei AP4000 versions prior to V200R009C00SPC800 Huawei AP4050DN-E versions prior to V200R009C00SPC800

Description The issue is related to improper authentication in the firmware of certain Huawei access point products. This could allow an attacker to execute arbitrary commands by exploiting the vulnerability through the serial port.

Recommendations For Huawei AP2000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4050DN-E versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2020-00198

CVE-2019-5298

Produtos afetados

Huawei Ap2000

Huawei Ap4000

Huawei Ap4050Dn-E

Referências · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2020-00198 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5298 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5298 · Nota de Segurança