CVE-2019-5290

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 57.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei S5700 FirmwareHuawei S6700 Firmware
Timeline
PublishedDec 13
Latest updateMay 24

Description

Huawei S5700 and S6700 have a DoS security vulnerability. Attackers with certain permissions perform specific operations on affected devices. Because the pointer in the program is not processed properly, the vulnerability can be exploited to cause the device to be abnormal.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/s5700_firmware9 versions+8
▶NVDhuawei/s6700_firmware4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-4rmj-jvqp-j56r: Huawei S5700 and S6700 have a DoS security vulnerability↗2022-05-24
▶
CVEList
CVE-2019-5290: Huawei S5700 and S6700 have a DoS security vulnerability↗2019-12-13
▶
CVE-2019-5290 (MEDIUM CVSS 6.5) | Huawei S5700 and S6700 have a DoS s | cvebase.io