PT-2019-17562 · Huawei · Huawei+1

Published 2019-12-04 · Updated 2019-12-19 · CVE-2019-5291

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei products (affected versions not specified)

Description The issue is related to insufficient verification of data authenticity. A remote, unauthenticated attacker can intercept specific packets between two devices, modify them, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit this to cause the target device to become abnormal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2019-5291

Affected Products

Huawei

Huawei Vrp

References · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5291 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5291 · Vendor Advisory