PT-2019-4440 · Huawei · Huawei Ap4050Dn-E+2

Published 2019-03-27 · Updated 2019-06-05 · CVE-2019-5298

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei AP2000 versions prior to V200R009C00SPC800 Huawei AP4000 versions prior to V200R009C00SPC800 Huawei AP4050DN-E versions prior to V200R009C00SPC800

Description The issue is related to improper authentication in the firmware of certain Huawei access point products. This could allow an attacker to execute arbitrary commands by exploiting the vulnerability through the serial port.

Recommendations For Huawei AP2000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4050DN-E versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2020-00198

CVE-2019-5298

Affected Products

Huawei Ap2000

Huawei Ap4000

Huawei Ap4050Dn-E

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00198 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5298 · Security Note