Vulnerability Description
There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Ar120-S Firmware | v200r005c32 |
| Huawei | Ar120-S | - |
| Huawei | Ar1200 Firmware | v200r005c20 |
| Huawei | Ar1200 | - |
| Huawei | Ar1200-S Firmware | v200r005c20 |
| Huawei | Ar1200-S | - |
| Huawei | Ar150 Firmware | v200r005c20 |
| Huawei | Ar150 | - |
| Huawei | Ar150-S Firmware | v200r005c00 |
| Huawei | Ar150-S | - |
| Huawei | Ar160 Firmware | v200r005c20 |
| Huawei | Ar160 | - |
| Huawei | Ar200 Firmware | v200r005c20 |
| Huawei | Ar200 | - |
| Huawei | Ar200-S Firmware | v200r005c20 |
| Huawei | Ar200-S | - |
| Huawei | Ar2200 Firmware | v200r005c20 |
| Huawei | Ar2200 | - |
| Huawei | Ar2200-S Firmware | v200r005c20 |
| Huawei | Ar2200-S | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-enVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-enVendor Advisory
FAQ
What is CVE-2019-5259?
CVE-2019-5259 is a vulnerability with a CVSS score of 6.5 (MEDIUM). There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can vie...
How severe is CVE-2019-5259?
CVE-2019-5259 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5259?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Ar120-S Firmware, Huawei Ar120-S, Huawei Ar1200 Firmware, Huawei Ar1200, Huawei Ar1200-S Firmware.