CVE-2019-19416

Katalog CVE

CVSS 7.5 · High EPSS 0,88%

Kerentanan Improper Input Validation pada huawei ar120-s firmware, huawei ar1200 firmware +9 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Rincian

Terbit di NVD

8 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 58,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 393 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en advisory vendor