PT-2019-2591 · Huawei · Huawei S Series Switches+1

Eack · Published 2019-05-22 · Updated 2019-07-26 · CVE-2019-5285

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei S series switches (affected versions not specified)

Description The issue is related to insufficient verification of input packets, allowing an unauthenticated remote attacker to send crafted packets and exploit the vulnerability. Successful exploitation may cause the device to reboot and result in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-02471

CVE-2019-5285

Affected Products

Huawei S Series Switches

Huawei Vrp

References · 5

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5285 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5285 · Security Note
• https://bdu.fstec.ru/vul/2019-02471 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en · Note