CVE-2019-5257

high-risk

Published 2019-12-13

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace) have a resource management vulnerability. An attacker who logs in to the board may send crafted messages from the internal network.

Do I need to act?

-

0.06% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

5

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (20)

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ap2000 Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Ips Firmware

Affected Vendors

Huawei

References (2)

Vendor Advisory https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en

Vendor Advisory https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en

51

/ 100

high-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 33/34 · Critical