CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2019-5258
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:ap2000_firmware
- huawei:espace_u1981_firmware
- huawei:ips_firmware
- huawei:ngfw_firmware
- huawei:nip6300_firmware
- huawei:nip6600_firmware
- huawei:nip6800_firmware
- huawei:s5700_firmware
- huawei:secospace_antiddos8000_firmware
- huawei:secospace_usg6300_firmware
- huawei:secospace_usg6500_firmware
- huawei:secospace_usg6600_firmware
- huawei:semg9811_firmware
- huawei:svn5600_firmware
- huawei:svn5800-c_firmware
- huawei:svn5800_firmware
- huawei:usg6000v_firmware