CVE-2019-5258

State: Published
Severity: Not scored
Published: Dec 13, 2019
Updated: Aug 4, 2024
Reserved: Jan 4, 2019

Description

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981n/a	V200R005C30Affected V200R006C10Affected V200R006C20Affected V200R007C10Affected V200R007C20Affected V200R008C00Affected V200R008C10Affected V200R009C00Affected V500R001C00SPC300Affected V500R001C00SPC500Affected V500R001C00SPH303Affected V500R001C00SPH508Affected V500R001C20Affected V500R001C20SPC100Affected V500R001C20SPC100PWEAffected V500R001C20SPC200Affected V500R001C20SPC200B062Affected V500R001C20SPC200PWEAffected V500R001C20SPC300B078Affected V500R001C20SPC300PWEAffected V500R001C30Affected V500R001C30SPC100Affected V500R001C30SPC100PWEAffected V500R001C30SPC200Affected V500R001C30SPC200PWEAffected and 62 more versions

Product

Versions

AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981n/a

V200R005C30Affected
V200R006C10Affected
V200R006C20Affected
V200R007C10Affected
V200R007C20Affected
V200R008C00Affected
V200R008C10Affected
V200R009C00Affected
V500R001C00SPC300Affected
V500R001C00SPC500Affected
V500R001C00SPH303Affected
V500R001C00SPH508Affected
V500R001C20Affected
V500R001C20SPC100Affected
V500R001C20SPC100PWEAffected
V500R001C20SPC200Affected
V500R001C20SPC200B062Affected
V500R001C20SPC200PWEAffected
V500R001C20SPC300B078Affected
V500R001C20SPC300PWEAffected
V500R001C30Affected
V500R001C30SPC100Affected
V500R001C30SPC100PWEAffected
V500R001C30SPC200Affected
V500R001C30SPC200PWEAffected
and 62 more versions

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.