← CVE Intelligence

CVE-2019-5258

n/a / AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 PUBLISHED

Description (CNA)

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Affected (CNA)

Vendor / productVersions
n/a / AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981affected V200R005C30; affected V200R006C10; affected V200R006C20; affected V200R007C10; affected V200R007C20; affected V200R008C00; affected V200R008C10; affected V200R009C00; affected V500R001C00SPC300; affected V500R001C00SPC500; affected V500R001C00SPH303; affected V500R001C00SPH508; affected V500R001C20; affected V500R001C20SPC100; affected V500R001C20SPC100PWE; affected V500R001C20SPC200; affected V500R001C20SPC200B062; affected V500R001C20SPC200PWE; affected V500R001C20SPC300B078; affected V500R001C20SPC300PWE; affected V500R001C30; affected V500R001C30SPC100; affected V500R001C30SPC100PWE; affected V500R001C30SPC200; affected V500R001C30SPC200PWE; affected V500R001C30SPC300; affected V500R001C50; affected V500R001C50PWE; affected V500R001C80; affected V500R005C00; affected V500R001C00SPC500PWE; affected V500R002C00; affected V500R002C00SPC100; affected V500R002C00SPC100PWE; affected V500R002C00SPC200; affected V500R002C00SPC200PWE; affected V500R002C00SPC300; affected V500R002C10; affected V500R002C10PWE; affected V500R002C30; affected V500R002C30PWE; affected V200R005C03; affected V200R003C00SPC100; affected V500R002C20; affected V500R001C00; affected V500R001C00SPC200; affected V500R001C00SPC600; affected V500R001C00SPC700; affected V500R001C20SPC300; affected V500R001C20SPC500; affected V500R001C20SPC600; affected V500R001C60SPC100; affected V500R001C60SPC101; affected V500R001C60SPC200; affected V500R001C60SPC300; affected V500R001C60SPC500; affected V500R001C60SPC600; affected V500R005C00SPC100; affected V100R001C20SPC100; affected V500R001C20SPC101; affected V500R001C80PWE; affected V100R001C00SPC200; affected V100R001C10SPC200; affected V100R001C10SPC201; affected V100R001C20SPC200; affected V500R001C00SPC050; affected V500R001C00SPC090; affected V500R001C30SPC500; affected V500R001C30SPC600; affected V500R001C30SPC600PWE; affected V500R001C30SPC601; affected V500R001C50SPC009; affected V500R001C50SPC100; affected V500R001C50SPC100PWE; affected V500R001C50SPC200; affected V500R001C50SPC200PWE; affected V500R001C50SPC300; affected V500R001C60; affected V500R001C60SPC100PWE; affected V500R001C60SPC200PWE; affected V500R005C00SPC102; affected V500R001C10; affected V500R001C10SPC100; affected V500R001C10SPC200; affected V500R003C00; affected V500R003C00SPC100; affected V200R003C50SPC700

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.