Test Kennung:	1.3.6.1.4.1.25623.1.0.143088
Kategorie:	Huawei
Titel:	Huawei Data Communication: Out-Of-Bound Read Vulnerability in Some Huawei Products (huawei-sa-20191023-01-buffer)
Zusammenfassung:	There is an out of bound read vulnerability in some Huawei products.
Beschreibung:	Summary: There is an out of bound read vulnerability in some Huawei products. Vulnerability Insight: There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2019-04073)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5294.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: An attacker may exploit the vulnerability to cause some service abnormal. Affected Software/OS: AR120-S versions V200R005C20 V200R006C10 V200R007C00 AR1200 versions V200R005C20 V200R006C10 V200R007C00 AR1200-S versions V200R005C20 V200R006C10 V200R007C00 AR150 versions V200R005C20 V200R006C10 V200R007C00 AR150-S versions V200R005C20 V200R006C10 V200R007C00 AR160 versions V200R005C20 V200R006C10 V200R007C00 AR200 versions V200R005C20 V200R006C10 V200R007C00 AR200-S versions V200R005C20 V200R006C10 V200R007C00 AR2200 versions V200R005C20 V200R006C10 V200R007C00 AR2200-S versions V200R005C20 V200R006C10 V200R007C00 AR3200 versions V200R005C20 V200R006C10 AR3600 versions V200R006C10 V200R007C00 IPS Module versions V500R001C30SPC100 NGFW Module versions V500R002C00 NIP6300 versions V500R001C30 NIP6600 versions V500R001C30 NetEngine16EX versions V200R005C20 V200R006C10 V200R007C00 S6700 versions V200R008C00SPC500 SRG1300 versions V200R005C20 V200R006C10 V200R007C00 SRG2300 versions V200R005C20 V200R006C10 V200R007C00 SRG3300 versions V200R005C20 V200R006C10 V200R007C00 Secospace AntiDDoS8000 versions V500R001C00 V500R001C20SPC200 V500R001C20SPC300 V500R001C20SPC500 V500R001C20SPC600 Secospace USG6300 versions V500R001C30 Secospace USG6500 versions V500R001C30 USG6000V versions V500R001C10 V500R001C20 Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-5294 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-buffer-en
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.