ID de Prueba:	1.3.6.1.4.1.25623.1.0.143088
Categoría:	Huawei
Título:	Huawei Data Communication: Out-Of-Bound Read Vulnerability in Some Huawei Products (huawei-sa-20191023-01-buffer)
Resumen:	There is an out of bound read vulnerability in some Huawei products.
Descripción:	Summary: There is an out of bound read vulnerability in some Huawei products. Vulnerability Insight: There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2019-04073)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5294.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: An attacker may exploit the vulnerability to cause some service abnormal. Affected Software/OS: AR120-S versions V200R005C20 V200R006C10 V200R007C00 AR1200 versions V200R005C20 V200R006C10 V200R007C00 AR1200-S versions V200R005C20 V200R006C10 V200R007C00 AR150 versions V200R005C20 V200R006C10 V200R007C00 AR150-S versions V200R005C20 V200R006C10 V200R007C00 AR160 versions V200R005C20 V200R006C10 V200R007C00 AR200 versions V200R005C20 V200R006C10 V200R007C00 AR200-S versions V200R005C20 V200R006C10 V200R007C00 AR2200 versions V200R005C20 V200R006C10 V200R007C00 AR2200-S versions V200R005C20 V200R006C10 V200R007C00 AR3200 versions V200R005C20 V200R006C10 AR3600 versions V200R006C10 V200R007C00 IPS Module versions V500R001C30SPC100 NGFW Module versions V500R002C00 NIP6300 versions V500R001C30 NIP6600 versions V500R001C30 NetEngine16EX versions V200R005C20 V200R006C10 V200R007C00 S6700 versions V200R008C00SPC500 SRG1300 versions V200R005C20 V200R006C10 V200R007C00 SRG2300 versions V200R005C20 V200R006C10 V200R007C00 SRG3300 versions V200R005C20 V200R006C10 V200R007C00 Secospace AntiDDoS8000 versions V500R001C00 V500R001C20SPC200 V500R001C20SPC300 V500R001C20SPC500 V500R001C20SPC600 Secospace USG6300 versions V500R001C30 Secospace USG6500 versions V500R001C30 USG6000V versions V500R001C10 V500R001C20 Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-5294 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-buffer-en
Copyright	Copyright (C) 2019 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.