PT-2019-17535 · Huawei · E5572-855

Published 2019-12-13 · Updated 2019-12-30 · CVE-2019-5253

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions E5572-855 versions earlier than 8.0.1.3(H335SP1C233)

Description The device has an improper authentication issue, where it does not perform sufficient authentication for certain operations. This could allow an attacker to cause the device to reboot after launching a man-in-the-middle attack.

Recommendations For versions earlier than 8.0.1.3(H335SP1C233), update to version 8.0.1.3(H335SP1C233) or later to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-5253

Affected Products

E5572-855

References · 3

• https://osv.dev/vulnerability/CVE-2019-5253 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-04-dos-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5253 · Security Note