CVE Feed

    Dashboard / CVE / CVE-2019-5304

    CVE-2019-5304

    Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

    Published:Jan 3, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 3, 2020
    EPSS Score:0.0024
    CVSS Score:7.5

    Affected Products

    Vendor
    Huawei
    Product
    Ar120-s
    Vendor
    Huawei
    Product
    Ar120-s Firmware
    Vendor
    Huawei
    Product
    Ar1200
    Vendor
    Huawei
    Product
    Ar1200-s
    Vendor
    Huawei
    Product
    Ar1200-s Firmware
    Vendor
    Huawei
    Product
    Ar1200 Firmware
    Vendor
    Huawei
    Product
    Ar150
    Vendor
    Huawei
    Product
    Ar150-s
    Vendor
    Huawei
    Product
    Ar150-s Firmware
    Vendor
    Huawei
    Product
    Ar150 Firmware
    Vendor
    Huawei
    Product
    Ar160
    Vendor
    Huawei
    Product
    Ar160 Firmware
    Vendor
    Huawei
    Product
    Ar200
    Vendor
    Huawei
    Product
    Ar200-s
    Vendor
    Huawei
    Product
    Ar200-s Firmware
    Vendor
    Huawei
    Product
    Ar200 Firmware
    Vendor
    Huawei
    Product
    Ar2200
    Vendor
    Huawei
    Product
    Ar2200-s
    Vendor
    Huawei
    Product
    Ar2200-s Firmware
    Vendor
    Huawei
    Product
    Ar2200 Firmware
    Vendor
    Huawei
    Product
    Ar3200
    Vendor
    Huawei
    Product
    Ar3200 Firmware
    Vendor
    Huawei
    Product
    Ar3600
    Vendor
    Huawei
    Product
    Ar3600 Firmware
    Vendor
    Huawei
    Product
    Ips Module
    Vendor
    Huawei
    Product
    Ips Module Firmware
    Vendor
    Huawei
    Product
    Netengine16ex
    Vendor
    Huawei
    Product
    Netengine16ex Firmware
    Vendor
    Huawei
    Product
    Ngfw Module
    Vendor
    Huawei
    Product
    Ngfw Module Firmware
    Vendor
    Huawei
    Product
    Nip6300
    Vendor
    Huawei
    Product
    Nip6300 Firmware
    Vendor
    Huawei
    Product
    Nip6600
    Vendor
    Huawei
    Product
    Nip6600 Firmware
    Vendor
    Huawei
    Product
    S5700
    Vendor
    Huawei
    Product
    S5700 Firmware
    Vendor
    Huawei
    Product
    S6700
    Vendor
    Huawei
    Product
    S6700 Firmware
    Vendor
    Huawei
    Product
    Secospace Antiddos8000
    Vendor
    Huawei
    Product
    Secospace Antiddos8000 Firmware
    Vendor
    Huawei
    Product
    Secospace Usg6300
    Vendor
    Huawei
    Product
    Secospace Usg6300 Firmware
    Vendor
    Huawei
    Product
    Secospace Usg6500
    Vendor
    Huawei
    Product
    Secospace Usg6500 Firmware
    Vendor
    Huawei
    Product
    Secospace Usg6600
    Vendor
    Huawei
    Product
    Secospace Usg6600 Firmware
    Vendor
    Huawei
    Product
    Srg1300
    Vendor
    Huawei
    Product
    Srg1300 Firmware
    Vendor
    Huawei
    Product
    Srg2300
    Vendor
    Huawei
    Product
    Srg2300 Firmware
    Vendor
    Huawei
    Product
    Srg3300
    Vendor
    Huawei
    Product
    Srg3300 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-19415 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2019-19416 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2019-19417 (CVSS 7.5) — The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could e…
    CVE-2020-9071 (CVSS 6.5) — There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past th…
    CVE-2019-5259 (CVSS 6.5) — There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR…
    CVE-2019-5291 (CVSS 5.9) — Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthent…
    CVE-2019-5293 (CVSS 6.5) — Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with oper…
    CVE-2019-5294 (CVSS 7.5) — There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may se…
    CVE-2017-17253 (CVSS 7.5) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…
    CVE-2017-17255 (CVSS 7.5) — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C0…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High