Vulnerability Description
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | S12700 Firmware | v200r005c00 |
| Huawei | S12700 | - |
| Huawei | S1700 Firmware | v200r008c00 |
| Huawei | S1700 | - |
| Huawei | S2300 Firmware | v200r003c00 |
| Huawei | S2300 | - |
| Huawei | S2700 Firmware | v200r005c00 |
| Huawei | S2700 | - |
| Huawei | S5300 Firmware | v200r003c00 |
| Huawei | S5300 | - |
| Huawei | S5700 Firmware | v200r003c00 |
| Huawei | S5700 | - |
| Huawei | S600-E Firmware | v200r008c00 |
| Huawei | S600-E | - |
| Huawei | S6300 Firmware | v200r003c00 |
| Huawei | S6300 | - |
| Huawei | S6700 Firmware | v200r003c00 |
| Huawei | S6700 | All versions |
| Huawei | S7700 Firmware | v200r003c00 |
| Huawei | S7700 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switchVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switchVendor Advisory
FAQ
What is CVE-2019-5285?
CVE-2019-5285 is a vulnerability with a CVSS score of 7.5 (HIGH). Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verificati...
How severe is CVE-2019-5285?
CVE-2019-5285 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5285?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei S12700 Firmware, Huawei S12700, Huawei S1700 Firmware, Huawei S1700, Huawei S2300 Firmware.