3 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 146EXPL: 0

CVE-2019-5304

https://notcve.org/view.php?id=CVE-2019-5304

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset. Algunos productos de Huawei tienen una vulnerabilidad de error de búfer. Un atacante remoto no identificado podría enviar mensajes MPLS Echo Request específicos hacia los productos de destino. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 6.5EPSS: 0%CPEs: 82EXPL: 0

CVE-2019-5259

https://notcve.org/view.php?id=CVE-2019-5259

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition. Se presenta una vulnerabilidad de filtrado de información en algunos productos Huawei (AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). Un atacante con permisos bajos puede visualizar cierta información de alto privilegio mediante la ejecución de comandos específicos. Una explotación con éxito podría causar una condición de divulgación de información. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-en • CWE-269: Improper Privilege Management •

CVSS: 6.7EPSS: 0%CPEs: 94EXPL: 0

CVE-2019-5300

https://notcve.org/view.php?id=CVE-2019-5300

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device. Existe una vulnerabilidad de omisión de verificación de firma digital en los routers Huawei AR1200, AR1200-S, AR150, AR160, AR20000, AR2200-S, AR3200, SRG1300, SRG2300 y SRG3300. La vulnerabilidad se debe a que el software afectado verifica incorrectamente las firmas digitales de la imagen del software en el dispositivo afectado. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en • CWE-347: Improper Verification of Cryptographic Signature •