Improper input validation in Huawei S12700
CVE-2019-5285
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.017 (76.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 76.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Huawei S12700
- Huawei S12700 Firmware — versions v200r005c00, v200r006c00, v200r007c00
- Huawei S12700, S1700, S2300, S2700, S5300, S5700, S600-E, S6300, S6700, S7700, S7900, S9300, S9300x, S9700, S9700 — versions S12700 V200R008C00, S12700 V200R010C00, S12700 V200R012C00
- Huawei S1700
- Huawei S1700 Firmware — versions v200r008c00, v200r009c00, v200r010c00
- Huawei S2300
- Huawei S2300 Firmware — versions v200r003c00, v200r005c00, v200r008c00
- Huawei S2700
- Huawei S2700 Firmware — versions v200r005c00, v200r006c00, v200r007c00
- Huawei S5300
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2019-5285?
- CVE-2019-5285 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2019-06-04.
- How severe is CVE-2019-5285?
- High severity. CVSS v3 base score is 7.5 out of 10.