Null Pointer Dereference Vulnerability in Huawei Network Products
CVE-2019-5256

5.5MEDIUM

Key Information:

Vendor
Huawei
Status
Ap2000;ips Module;ngfw Module;nip6300;nip6600;nip6800;s5700;svn5600;svn5800;svn5800-c;semg9811;secospace Antiddos8000;secospace Usg6300;secospace Usg6500;secospace Usg6600;usg6000v;espace U1981
Vendor
CVE Published:
13 December 2019

Summary

Huawei network products are susceptible to a null pointer dereference vulnerability that affects multiple models. This vulnerability occurs when the system mistakenly dereferences a pointer it presumes to be valid, but is in fact NULL. An attacker with local access can exploit this flaw by sending specially crafted parameters, potentially leading to service interruptions and system reboots. It is crucial for users of the affected products to apply the latest software updates and follow recommended security practices to mitigate the risks associated with this vulnerability.

Affected Version(s)

AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 V200R005C30

AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 V200R006C10

AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 V200R006C20

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.