CVE-2019-5293
published 2019-11-13CVE-2019-5293: Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability…
PriorityP430medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.87%
54.8th percentile
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | ar120-s_firmware | — | — |
| huawei | ar120-s_firmware | — | — |
| huawei | ar1200-s_firmware | — | — |
| huawei | ar1200-s_firmware | — | — |
| huawei | ar1200_firmware | — | — |
| huawei | ar1200_firmware | — | — |
| huawei | ar150-s_firmware | — | — |
| huawei | ar150-s_firmware | — | — |
| huawei | ar150_firmware | — | — |
| huawei | ar150_firmware | — | — |
| huawei | ar160_firmware | — | — |
| huawei | ar160_firmware | — | — |
| huawei | ar200-s_firmware | — | — |
| huawei | ar200-s_firmware | — | — |
| huawei | ar200_firmware | — | — |
| huawei | ar200_firmware | — | — |
| huawei | ar2200-s_firmware | — | — |
| huawei | ar2200-s_firmware | — | — |
| huawei | ar2200_firmware | — | — |
| huawei | ar2200_firmware | — | — |
| huawei | ar3200_firmware | — | — |
| huawei | ar3200_firmware | — | — |
| huawei | ar3600_firmware | — | — |
| huawei | netengine16ex_firmware | — | — |
| huawei | netengine16ex_firmware | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-11-13
Published