PT-2019-17540 · Huawei · Nip6800+17

Published 2019-12-11 · Updated 2019-12-23 · CVE-2019-5258

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) (affected versions not specified)

Description The issue is related to a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-5258

Affected Products

Ap2000

Huawei Vrp

Ips Module

Ngfw Module

Nip6300

Nip6600

Nip6800

S5700

Svn5600

Svn5800

Svn5800-C

Semg9811

Secospace Antiddos8000

Secospace Usg6300

Secospace Usg6500

Secospace Usg6600

Usg6000V

Espace U1981

References · 3

• https://osv.dev/vulnerability/CVE-2019-5258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5258 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en · Vendor Advisory