← CVE Intelligence

CVE-2019-5291

n/a / AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;CloudEngine 12800;NetEngine16EX;S6700;SRG1300;SRG2300;SRG3300 PUBLISHED

Description (CNA)

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some fields in the packets, an attacker may exploit the vulnerability to cause the target device to be abnormal.

Affected (CNA)

Vendor / productVersions
n/a / AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;CloudEngine 12800;NetEngine16EX;S6700;SRG1300;SRG2300;SRG3300affected V200R005C20; affected V200R006C10; affected V200R007C00; affected V200R008C50; affected V200R005C00; affected V200R002C10; affected V200R002C20; affected V200R008C00; affected V200R010C00SPC300; affected V200R010C00SPC600; affected V200R011C00SPC200

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.