Information Leakage Vulnerability in Huawei Network Products
CVE-2019-5259

6.5MEDIUM

Key Information:

Vendor
Huawei
Status
Ar120-s;ar1200;ar1200-s;ar150;ar150-s;ar160;ar200;ar200-s;ar2200;ar2200-s;ar3200;ar3600
Vendor
CVE Published:
16 December 2019

Summary

An information leakage issue exists in several Huawei networking products, allowing unauthorized users to access sensitive data. This vulnerability affects specific models in the AR series, enabling low-privilege attackers to execute commands that potentially disclose high-privilege information. Successful exploitation could lead to unwanted information exposure, undermining the confidentiality of network configurations and related data.

Affected Version(s)

AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600 V200R005C20

AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600 V200R005C32

AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600 V200R006C10

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.