← CVE Intelligence

CVE-2019-5300

Huawei / AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300, SRG3300 PUBLISHED

Description (CNA)

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Affected (CNA)

Vendor / productVersions
Huawei / AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300, SRG3300affected AR1200 V200R008C50; affected AR1200 V200R009C00; affected AR1200 V200R010C00; affected AR1200-S V200R007C00; affected AR1200-S V200R008C20; affected AR1200-S V200R008C50; affected AR1200-S V200R009C00; affected AR1200-S V200R010C00; affected AR150 V200R007C00; affected AR150 V200R008C20; affected AR150 V200R008C50; affected AR150 V200R009C00; affected AR150 V200R010C00; affected AR160 V200R007C00; affected AR160 V200R008C20; affected AR160 V200R008C50; affected AR160 V200R009C00

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.