What is CVE-2019-5248?

CVE-2019-5248 is a high-severity vulnerability in Huawei Cloudengine_12800, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.4/10. Published 2019-12-13.

How severe is CVE-2019-5248?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Huawei Cloudengine_12800

CVE-2019-5248

CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit thi…

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Huawei Cloudengine_12800
Huawei Cloudengine_12800_firmware — versions v200r001c00spc600, v200r001c00spc700, v200r002c01
N/a Cloudengine 12800 — versions V200R001C00SPC600, V200R001C00SPC700, V200R002C01

Weakness classification (CWE)

CWE-401 — Missing Release of Memory after Effective Lifetime

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5248?: CVE-2019-5248 is a high-severity vulnerability in Huawei Cloudengine_12800, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.4/10. Published 2019-12-13.
How severe is CVE-2019-5248?: High severity. CVSS v3 base score is 7.4 out of 10.