PT-2019-17531 · Huawei · Cloudengine 12800+1

Published 2019-12-04 · Updated 2021-07-21 · CVE-2019-5248

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CloudEngine 12800 (affected versions not specified) Some Huawei products (affected versions not specified)

Description The issue is related to a Denial of Service (DoS) vulnerability. An attacker from a neighboring device can send a large number of specific packets, resulting in a memory leak after the device processes these packets. This allows the attacker to exploit the issue and cause DoS attacks on the target device.

Recommendations For CloudEngine 12800, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Some Huawei products, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2019-5248

Affected Products

Cloudengine 12800

Huawei Vrp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5248 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5248 · Vendor Advisory