Vulnerability Intelligence Report
CVE-2019-5255
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a DoS vulnerability. An attacker may send crafted messages from a FTP client to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the system out-of-bounds read and result in a denial of service condition of the affected service.
No Active Exploit Signals
CVSS Base Score
5.5
MEDIUM
EPSS Probability:0.20%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| huawei | ap2000_firmware | v200r005c30, v200r006c10, v200r006c20, v200r007c10, v200r007c20, v200r008c00, v200r008c10, v200r009c00 |
| huawei | ap2000 | all |
| huawei | ips_firmware | v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c20spc300pwe, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00 |
| huawei | ips | all |
| huawei | ngfw_firmware | v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c20spc300pwe, v500r002c00, v500r002c00spc100, v500r002c00spc100pwe, v500r002c00spc200, v500r002c00spc200pwe, v500r002c00spc300, v500r002c10, v500r002c10pwe, v500r002c30, v500r002c30pwe, v500r005c00 |
| huawei | ngfw | all |
| huawei | nip6300_firmware | v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c20spc300pwe, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00 |
| huawei | nip6300 | all |
| huawei | nip6600_firmware | v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00 |
| huawei | nip6600 | all |
| huawei | nip6800_firmware | v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00 |
| huawei | nip6800 | all |
| huawei | s5700_firmware | v200r005c03 |
| huawei | s5700 | all |
| huawei | svn5600_firmware | v200r003c00spc100 |
| huawei | svn5600 | all |
| huawei | svn5800_firmware | v200r003c00spc100 |
| huawei | svn5800 | all |
| huawei | svn5800-c_firmware | v200r003c00spc100 |
| huawei | svn5800-c | all |
| huawei | semg9811_firmware | v500r002c20, v500r002c30, v500r005c00 |
| huawei | semg9811 | all |
| huawei | secospace_antiddos8000_firmware | v500r001c00, v500r001c00spc200, v500r001c00spc300, v500r001c00spc500, v500r001c00spc600, v500r001c00spc700, v500r001c00sph303, v500r001c20spc200, v500r001c20spc300, v500r001c20spc500, v500r001c20spc600, v500r001c60spc100, v500r001c60spc101, v500r001c60spc200, v500r001c60spc300, v500r001c60spc500, v500r001c60spc600, v500r005c00, v500r005c00spc100 |
| huawei | secospace_antiddos8000 | all |
| huawei | secospace_usg6300_firmware | v100r001c20spc100, v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc101, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c20spc300pwe, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c50, v500r001c50pwe, v500r001c80, v500r001c80pwe, v500r005c00 |
| huawei | secospace_usg6300 | all |
| huawei | secospace_usg6500_firmware | v100r001c20spc100, v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc101, v500r001c20spc200, v500r001c20spc200b062, v500r001c20spc200pwe, v500r001c20spc300b078, v500r001c20spc300pwe, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c50, v500r001c50pwe, v500r001c80, v500r001c80pwe, v500r005c00 |
| huawei | secospace_usg6500 | all |
| huawei | secospace_usg6600_firmware | v100r001c00spc200, v100r001c10spc200, v100r001c10spc201, v100r001c20spc100, v100r001c20spc200, v500r001c00, v500r001c00spc050, v500r001c00spc090, v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c20, v500r001c20spc100, v500r001c20spc100pwe, v500r001c20spc101, v500r001c20spc200, v500r001c20spc200pwe, v500r001c20spc300, v500r001c20spc300b078, v500r001c20spc300pwe, v500r001c30, v500r001c30spc100, v500r001c30spc100pwe, v500r001c30spc200, v500r001c30spc200pwe, v500r001c30spc300, v500r001c30spc500, v500r001c30spc600, v500r001c30spc600pwe, v500r001c30spc601, v500r001c50, v500r001c50pwe, v500r001c50spc009, v500r001c50spc100, v500r001c50spc100pwe, v500r001c50spc200, v500r001c50spc200pwe, v500r001c50spc300, v500r001c60, v500r001c60spc100, v500r001c60spc100pwe, v500r001c60spc200, v500r001c60spc200pwe, v500r001c60spc300, v500r001c60spc500, v500r001c80, v500r001c80pwe, v500r005c00, v500r005c00spc100, v500r005c00spc102 |
| huawei | secospace_usg6600 | all |
| huawei | usg6000v_firmware | v500r001c10, v500r001c10spc100, v500r001c10spc200, v500r001c20, v500r001c20spc100, v500r001c20spc200, v500r001c20spc300, v500r001c20spc500, v500r001c20spc600, v500r003c00, v500r003c00spc100, v500r005c00, v500r005c00spc100 |
| huawei | usg6000v | all |
| huawei | espace_u1981_firmware | v200r003c50spc700 |
| huawei | espace_u1981 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.199%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Huawei Technologies · Vendor · China |
| Reserved | 2019-01-04T00:00:00 |
| Published | 2019-12-13T22:48:31 |
| Last Updated | 2024-08-04T19:47:56 |
Community Chatter & Buzz