What is CVE-2019-5232?

CVE-2019-5232 is a high-severity vulnerability in Huawei Vp9630, classified under Use of Insufficiently Random Values. CVSS score: 7.5/10. Published 2019-11-29.

How severe is CVE-2019-5232?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Huawei Vp9630

CVE-2019-5232

There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak.

Published 2019-11-29 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.010 (61.6th percentile), scored 2026-10-23.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 62nd percentile — 61.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000

Affected products

Huawei Vp9630
Huawei Vp9630 Firmware — versions v500r002c00, v500r002c10
Huawei Vp9650
Huawei Vp9650 Firmware — versions v500r002c00, v500r002c10
Huawei Vp9660
Huawei Vp9660 Firmware — versions v500r002c00, v500r002c10
Vp9630, Vp9650, Vp9660 — versions V500R002C00, V500R002C10

Weakness classification (CWE)

CWE-330 — Use of Insufficiently Random Values

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-viewpoint-en (Vendor Advisory)

Frequently asked questions

What is CVE-2019-5232?: CVE-2019-5232 is a high-severity vulnerability in Huawei Vp9630, classified under Use of Insufficiently Random Values. CVSS score: 7.5/10. Published 2019-11-29.
How severe is CVE-2019-5232?: High severity. CVSS v3 base score is 7.5 out of 10.