Improper input validation in Huawei S12700
CVE-2019-5285
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Huawei S12700
- Huawei S12700_firmware — versions v200r005c00, v200r006c00, v200r007c00
- Huawei S12700, S1700, S2300, S2700, S5300, S5700, S600-e, S6300, S6700, S7700, S7900, S9300, S9300x, S9700, S9700 — versions S12700 V200R008C00, S12700 V200R010C00, S12700 V200R012C00
- Huawei S1700
- Huawei S1700_firmware — versions v200r008c00, v200r009c00, v200r010c00
- Huawei S2300
- Huawei S2300_firmware — versions v200r003c00, v200r005c00, v200r008c00
- Huawei S2700
- Huawei S2700_firmware — versions v200r005c00, v200r006c00, v200r007c00
- Huawei S5300
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@huawei.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-5285?
- CVE-2019-5285 is a high-severity vulnerability in Huawei S12700, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2019-06-04.
- How severe is CVE-2019-5285?
- High severity. CVSS v3 base score is 7.5 out of 10.