PT-2019-17537 · Huawei · Huawei Secospace Usg6600+16

Published

2019-12-11

·

Updated

2020-08-24

·

CVE-2019-5255

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Huawei AP2000 (affected versions not specified) Huawei IPS Module (affected versions not specified) Huawei NGFW Module (affected versions not specified) Huawei NIP6300 (affected versions not specified) Huawei NIP6600 (affected versions not specified) Huawei NIP6800 (affected versions not specified) Huawei S5700 (affected versions not specified) Huawei SVN5600 (affected versions not specified) Huawei SVN5800 (affected versions not specified) Huawei SVN5800-C (affected versions not specified) Huawei SeMG9811 (affected versions not specified) Huawei Secospace AntiDDoS8000 (affected versions not specified) Huawei Secospace USG6300 (affected versions not specified) Huawei Secospace USG6500 (affected versions not specified) Huawei Secospace USG6600 (affected versions not specified) Huawei USG6000V (affected versions not specified) Huawei eSpace U1981 (affected versions not specified)
Description The issue is related to a denial of service condition caused by an out-of-bounds read. An attacker can exploit this by sending crafted messages from an FTP client due to insufficient validation of the message. This results in a denial of service condition of the affected service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2019-5255

Affected Products

Huawei Ap2000
Huawei Ips Module
Huawei Ngfw Module
Huawei Nip6300
Huawei Nip6600
Huawei Nip6800
Huawei S5700
Huawei Svn5600
Huawei Svn5800
Huawei Semg9811
Huawei Secospace Antiddos8000
Huawei Secospace Usg6300
Huawei Secospace Usg6500
Huawei Secospace Usg6600
Huawei Usg6000V
Huawei Vrp
Huawei Espace U1981