← Back to CVE List
Vulnerability Intelligence Report

CVE-2019-19417

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:0.88%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
Huawei AR120-S V200R006C10 (affected), V200R007C00 (affected), V200R008C20 V200R008C30 (affected)
Huawei AR1200 V200R006C10 (affected), V200R007C00 (affected), V200R008C20 V200R008C30 (affected)
Huawei AR1200-S V200R006C10 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR150 V200R006C10 (affected), V200R007C00 (affected), V200R007C01 (affected), V200R007C02 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR150-S V200R006C10SPC300 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR160 V200R006C10 (affected), V200R006C12 (affected), V200R007C00 (affected), V200R007C01 (affected), V200R007C02 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR200 V200R006C10 (affected), V200R007C00 (affected), V200R007C01 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR200-S V200R006C10 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR2200 V200R006C10 (affected), V200R006C13 (affected), V200R006C16PWE (affected), V200R007C00 (affected), V200R007C01 (affected), V200R007C02 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR2200-S V200R006C10 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR3200 V200R006C10 (affected), V200R006C11 (affected), V200R007C00 (affected), V200R007C01 (affected), V200R007C02 (affected), V200R008C00 (affected), V200R008C10 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei AR3600 V200R006C10 (affected), V200R007C00 (affected), V200R007C01 (affected), V200R008C20 (affected)
Huawei AR510 V200R006C10 (affected), V200R006C12 (affected), V200R006C13 (affected), V200R006C15 (affected), V200R006C16 (affected), V200R006C17 (affected), V200R007C00SPC180T (affected), V200R007C00SPC600 (affected), V200R007C00SPC900 (affected), V200R007C00SPCb00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei DP300 V500R002C00 (affected)
Huawei IPS Module V100R001C10 (affected), V100R001C20 (affected), V100R001C30 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei NGFW Module V100R001C10 (affected), V100R001C20 (affected), V100R001C30 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R002C00 (affected), V500R002C10 (affected)
Huawei NIP6300 V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei NIP6600 V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei NIP6800 V500R001C30 (affected), V500R001C50 (affected)
Huawei NetEngine16EX V200R006C10 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei RSE6500 V500R002C00 (affected)
Huawei SMC2.0 V100R003C00SPC200T (affected), V100R003C00SPC300T (affected), V100R003C00SPC301T (affected), V100R003C10 (affected), V100R005C00SPC100 (affected), V100R005C00SPC101B001T (affected), V100R005C00SPC102 (affected), V100R005C00SPC103 (affected), V100R005C00SPC200 (affected), V100R005C00SPC201T (affected), V500R002C00 (affected), V600R006C00 (affected)
Huawei SRG1300 V200R006C10 (affected), V200R007C00 (affected), V200R007C02 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei SRG2300 V200R006C10 (affected), V200R007C00 (affected), V200R007C02 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei SRG3300 V200R006C10 (affected), V200R007C00 (affected), V200R008C20 (affected), V200R008C30 (affected)
Huawei SVN5600 V200R003C00 (affected), V200R003C10 (affected)
Huawei SVN5800 V200R003C00 (affected), V200R003C10 (affected)
Huawei SVN5800-C V200R003C00 (affected), V200R003C10 (affected)
Huawei SeMG9811 V300R001C01SPC500 (affected), V300R001C01SPC500T (affected), V300R001C01SPC700 (affected), V300R001C01SPCa00 (affected)
Huawei Secospace USG6300 V100R001C10 (affected), V100R001C20 (affected), V100R001C30 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei Secospace USG6500 V100R001C10 (affected), V100R001C20 (affected), V100R001C30 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei Secospace USG6600 V100R001C00 (affected), V100R001C10 (affected), V100R001C20 (affected), V100R001C30 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei SoftCo V200R001C01SPC300 (affected), V200R001C01SPC400 (affected), V200R001C01SPC500 (affected), V200R001C01SPC600 (affected), V200R001C01SPH703 (affected), V200R003C00SPC100 (affected), V200R003C00SPC200 (affected), V200R003C00SPC300 (affected), V200R003C00SPC500 (affected), V200R003C20 (affected)
Huawei TE30 V100R001C02SPC100 (affected), V100R001C02SPC200 V100R001C10 (affected), V500R002C00SPC200 (affected), V500R002C00SPC600 (affected), V500R002C00SPC700 (affected), V500R002C00SPC900 (affected), V500R002C00SPCb00 (affected), V600R006C00 (affected)
Huawei TE40 V500R002C00SPC600 (affected), V500R002C00SPC700 (affected), V500R002C00SPC900 (affected), V500R002C00SPCb00 (affected), V600R006C00 (affected)
Huawei TE50 V500R002C00SPC600 (affected), V500R002C00SPCb00 (affected), V600R006C00 (affected)
Huawei TE60 V100R001C01SPC100 (affected), V100R001C10 (affected), V100R001C10SPC300 (affected), V100R001C10SPC400 (affected), V100R001C10SPC500 (affected), V100R001C10SPC600 (affected), V100R001C10SPC800 (affected), V100R003C00 (affected), V500R002C00 (affected), V500R002C00SPC100 (affected), V500R002C00SPC200 (affected), V500R002C00SPC300 (affected), V500R002C00SPC600 (affected), V500R002C00SPC700 (affected), V500R002C00SPC800 (affected), V500R002C00SPC900 (affected), V500R002C00SPCa00 (affected), V500R002C00SPCb00 (affected), V600R006C00 (affected), V600R006C00SPC200 (affected)
Huawei TP3206 V100R002C00 (affected)
Huawei USG9500 V300R001C01 (affected), V300R001C20 (affected), V500R001C00 (affected), V500R001C20 (affected), V500R001C30 (affected), V500R001C50 (affected)
Huawei USG9520 V300R001C01SPC800PWE (affected)
Huawei USG9560 V300R001C20SPC300 (affected)
Huawei VP9660 V200R001C02SPC100 (affected), V200R001C02SPC200 (affected), V200R001C02SPC300 (affected), V200R001C02SPC300T (affected), V200R001C02SPC400 (affected), V200R001C30SPC100 (affected), V200R001C30SPC100B015T (affected), V200R001C30SPC101 (affected), V200R001C30SPC101TB015 (affected), V200R001C30SPC102T (affected), V200R001C30SPC103T (affected), V200R001C30SPC104T (affected), V200R001C30SPC200 (affected), V200R001C30SPC200B022T (affected), V200R001C30SPC201B023T (affected), V200R001C30SPC202B025T (affected), V200R001C30SPC203T (affected), V200R001C30SPC206T (affected), V200R001C30SPC207T (affected), V200R001C30SPC208T (affected), V200R001C30SPC209T (affected), V200R001C30SPC300 (affected), V200R001C30SPC400 (affected), V200R001C30SPC400B001 (affected), V200R001C30SPC400T (affected), V200R001C30SPC401T (affected), V200R001C30SPC402T (affected), V200R001C30SPC403T (affected), V200R001C30SPC404T (affected), V200R001C30SPC405T (affected), V200R001C30SPC600 (affected), V200R001C30SPC700 (affected), V200R001C30SPC700T (affected), V200R001C30SPC701T (affected), V200R001C30SPC702T (affected), V200R001C30SPC703T (affected), V200R001C30SPC800 (affected), V200R001C30SPC800T (affected), V200R001C30SPC900 (affected), V200R001C30SPCa00 (affected), V200R001C30SPCa00T (affected), V200R001C30SPCa01 (affected), V200R001C30SPCa01T (affected), V200R001C30SPCa02T (affected), V200R001C30SPCb00 (affected), V200R001C30SPCc00 (affected), V200R001C30SPCd00 (affected), V200R001C30SPCd00T (affected), V200R001C30SPCd01T (affected), V200R001C30SPCd (affected)
Huawei ViewPoint 8660 V100R008C03B013SP02 (affected), V100R008C03B013SP03 (affected), V100R008C03B013SP04 (affected), V100R008C03SPC100 (affected), V100R008C03SPC200 (affected), V100R008C03SPC300 (affected), V100R008C03SPC400 (affected), V100R008C03SPC500 (affected), V100R008C03SPC600 (affected), V100R008C03SPC700 (affected), V100R008C03SPC800 (affected), V100R008C03SPC900 (affected), V100R008C03SPCa00 (affected), V100R008C03SPCb00 (affected), V100R008C03SPCc00 (affected)
Huawei ViewPoint 9030 V100R011C02SPC100 (affected), V100R011C03B012SP15 (affected), V100R011C03B012SP16 (affected), V100R011C03B015SP03 (affected), V100R011C03LGWL01SPC100 (affected), V100R011C03LGWL01SPC100B012 (affected), V100R011C03SPC100 (affected), V100R011C03SPC200 (affected), V100R011C03SPC300 (affected), V100R011C03SPC400 (affected), V100R011C03SPC500 (affected)
Huawei eSpace U1910 V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC500 (affected), V100R001C20SPC600 (affected), V100R001C20SPH703 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)
Huawei eSpace U1911 V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC500 (affected), V100R001C20SPC600 (affected), V100R001C20SPH309 (affected), V100R001C20SPH703 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)
Huawei eSpace U1930 V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC500 (affected), V100R001C20SPC600 (affected), V100R001C20SPH703 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)
Huawei eSpace U1960 V100R001C01SPC500 (affected), V100R001C20LCRW01T (affected), V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC600 (affected), V100R001C20SPC600T (affected), V100R001C20SPH309 (affected), V100R001C20SPH703 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)
Huawei eSpace U1980 V100R001C01SPC500T (affected), V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC500T (affected), V100R001C20SPC502 (affected), V100R001C20SPC600 (affected), V100R001C20SPH309 (affected), V100R001C20SPH703 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)
Huawei eSpace U1981 V100R001C20SPC300 (affected), V100R001C20SPC400 (affected), V100R001C20SPC500 (affected), V100R001C20SPC600 (affected), V100R001C20SPC700 (affected), V100R001C20SPH702 (affected), V100R001C20SPH703 (affected), V100R001C30 (affected), V200R003C00 (affected), V200R003C20 (affected), V200R003C30 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.883%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityHuawei Technologies · Vendor · China
Reserved2019-11-29T00:00:00
Published2020-07-08T16:53:05
Last Updated2024-08-05T02:16:47

LINK COPIED TO CLIPBOARD