Insufficient Random Values Vulnerability in Huawei ViewPoint Products
CVE-2019-5232

7.5HIGH

Key Information:

Vendor
Huawei
Status
Vp9630, Vp9650, Vp9660
Vendor
CVE Published:
29 November 2019

Summary

The vulnerability in Huawei ViewPoint products is characterized by the use of insufficiently random values, enabling an unauthenticated remote attacker to predict information through numerous attempts. This flaw allows for potential information leakage, compromising the integrity and confidentiality of user data.

Affected Version(s)

VP9630, VP9650, VP9660 V500R002C00, V500R002C10

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.