CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2019-5256
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this vulnerability by sending crafted parameters. A successful exploit could cause a denial of service and the process reboot.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:ap2000_firmware
- huawei:espace_u1981_firmware
- huawei:ips_firmware
- huawei:ngfw_firmware
- huawei:nip6300_firmware
- huawei:nip6600_firmware
- huawei:nip6800_firmware
- huawei:s5700_firmware
- huawei:secospace_antiddos8000_firmware
- huawei:secospace_usg6300_firmware
- huawei:secospace_usg6500_firmware
- huawei:secospace_usg6600_firmware
- huawei:semg9811_firmware
- huawei:svn5600_firmware
- huawei:svn5800-c_firmware
- huawei:svn5800_firmware
- huawei:usg6000v_firmware