Test ID:	1.3.6.1.4.1.25623.1.0.143268
Category:	Huawei
Title:	Huawei Data Communication: Insufficient Verification of Data Authenticity Vulnerability In Some Huawei Products (huawei-sa-20191204-01-validation)
Summary:	Some Huawei products has an insufficient verification of data authenticity vulnerability.
Description:	Summary: Some Huawei products has an insufficient verification of data authenticity vulnerability. Vulnerability Insight: Some Huawei products has an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modifies the packets, and sends the modified packets to the peer device. Due to insufficient verification of some fields in packets, an attacker may exploit the vulnerability to cause the target device abnormal. (Vulnerability ID: HWPSIRT-2019-04076)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5291.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: An attacker may exploit the vulnerability to cause the target device abnormal. Affected Software/OS: AR120-S versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR1200 versions V200R005C00 V200R006C10 V200R007C00 V200R008C50 AR1200-S versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR150 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR150-S versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR160 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR200 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR200-S versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR2200 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR2200-S versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR3200 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 AR3600 versions V200R006C10 V200R007C00 V200R008C50 CloudEngine 12800 versions V200R002C10 V200R002C20 IPS Module versions V500R001C30SPC100 V500R001C30SPC100PWE V500R001C30SPC200 NGFW Module versions V500R002C00SPC200 NIP6300 versions V500R001C30SPC100 V500R001C30SPC200 NIP6600 versions V500R001C30SPC100 V500R001C30SPC200 NetEngine16EX versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 S6700 versions V200R008C00 V200R010C00SPC300 V200R010C00SPC600 V200R011C00SPC200 SRG1300 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 SRG2300 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 SRG3300 versions V200R005C20 V200R006C10 V200R007C00 V200R008C50 Secospace AntiDDoS8000 versions V500R001C20SPC200 V500R001C20SPC300 V500R001C20SPC500 V500R001C20SPC600 V500R001C60SPC100 V500R001C60SPC101 V500R001C60SPC200 V500R001C60SPC300 V500R001C60SPC500 V500R001C60SPC600 V500R005C00SPC100 V500R005C00SPC200 Secospace USG6300 versions V500R001C30SPC100 V500R001C30SPC200 Secospace USG6500 versions V500R001C30SPC100 V500R001C30SPC200 Secospace USG6600 versions V500R001C30SPC100 V500R001C30SPC200 Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-5291 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-validation-en
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.