CVE Feed

    Dashboard / CVE / CVE-2019-19397

    CVE-2019-19397

    There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.

    Published:Dec 13, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 13, 2019
    EPSS Score:0.00187
    CVSS Score:7.5

    Affected Products

    Vendor
    Huawei
    Product
    S12700
    Vendor
    Huawei
    Product
    S12700 Firmware
    Vendor
    Huawei
    Product
    S1700
    Vendor
    Huawei
    Product
    S1700 Firmware
    Vendor
    Huawei
    Product
    S2700
    Vendor
    Huawei
    Product
    S2700 Firmware
    Vendor
    Huawei
    Product
    S5700
    Vendor
    Huawei
    Product
    S5700 Firmware
    Vendor
    Huawei
    Product
    S6700
    Vendor
    Huawei
    Product
    S6700 Firmware
    Vendor
    Huawei
    Product
    S7700
    Vendor
    Huawei
    Product
    S7700 Firmware
    Vendor
    Huawei
    Product
    S9700
    Vendor
    Huawei
    Product
    S9700 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-37129 (CVSS 7.5) — There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a functi…
    CVE-2021-22357 (CVSS 7.5) — There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due…
    CVE-2021-22329 (CVSS 4.9) — There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to…
    CVE-2021-22377 (CVSS 7.2) — There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R01…
    CVE-2021-22321 (CVSS 5.3) — There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in …
    CVE-2020-1866 (CVSS 6.5) — There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the …
    CVE-2019-5285 (CVSS 7.5) — Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted pa…
    CVE-2017-15327 (CVSS 4.3) — S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06,…
    CVE-2016-8785 (CVSS 4.3) — Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R0…
    CVE-2016-8786 (CVSS 7.5) — Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00,…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High