Test ID:	1.3.6.1.4.1.25623.1.0.143088
Category:	Huawei
Title:	Huawei Data Communication: Out-Of-Bound Read Vulnerability in Some Huawei Products (huawei-sa-20191023-01-buffer)
Summary:	There is an out of bound read vulnerability in some Huawei products.
Description:	Summary: There is an out of bound read vulnerability in some Huawei products. Vulnerability Insight: There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2019-04073)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-5294.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references. Vulnerability Impact: An attacker may exploit the vulnerability to cause some service abnormal. Affected Software/OS: AR120-S versions V200R005C20 V200R006C10 V200R007C00 AR1200 versions V200R005C20 V200R006C10 V200R007C00 AR1200-S versions V200R005C20 V200R006C10 V200R007C00 AR150 versions V200R005C20 V200R006C10 V200R007C00 AR150-S versions V200R005C20 V200R006C10 V200R007C00 AR160 versions V200R005C20 V200R006C10 V200R007C00 AR200 versions V200R005C20 V200R006C10 V200R007C00 AR200-S versions V200R005C20 V200R006C10 V200R007C00 AR2200 versions V200R005C20 V200R006C10 V200R007C00 AR2200-S versions V200R005C20 V200R006C10 V200R007C00 AR3200 versions V200R005C20 V200R006C10 AR3600 versions V200R006C10 V200R007C00 IPS Module versions V500R001C30SPC100 NGFW Module versions V500R002C00 NIP6300 versions V500R001C30 NIP6600 versions V500R001C30 NetEngine16EX versions V200R005C20 V200R006C10 V200R007C00 S6700 versions V200R008C00SPC500 SRG1300 versions V200R005C20 V200R006C10 V200R007C00 SRG2300 versions V200R005C20 V200R006C10 V200R007C00 SRG3300 versions V200R005C20 V200R006C10 V200R007C00 Secospace AntiDDoS8000 versions V500R001C00 V500R001C20SPC200 V500R001C20SPC300 V500R001C20SPC500 V500R001C20SPC600 Secospace USG6300 versions V500R001C30 Secospace USG6500 versions V500R001C30 USG6000V versions V500R001C10 V500R001C20 Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-5294 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-buffer-en
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.