PT-2019-17538
CVE-2019-5256
·
Published
2019-12-11
·
Updated
2020-08-24
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Huawei AP2000 version (affected versions not specified)
Huawei IPS Module version (affected versions not specified)
Huawei NGFW Module version (affected versions not specified)
Huawei NIP6300 version (affected versions not specified)
Huawei NIP6600 version (affected versions not specified)
Huawei NIP6800 version (affected versions not specified)
Huawei S5700 version (affected versions not specified)
Huawei SVN5600 version (affected versions not specified)
Huawei SVN5800 version (affected versions not specified)
Huawei SVN5800-C version (affected versions not specified)
Huawei SeMG9811 version (affected versions not specified)
Huawei Secospace AntiDDoS8000 version (affected versions not specified)
Huawei Secospace USG6300 version (affected versions not specified)
Huawei Secospace USG6500 version (affected versions not specified)
Huawei Secospace USG6600 version (affected versions not specified)
Huawei USG6000V version (affected versions not specified)
Huawei eSpace U1981 version (affected versions not specified)
Description
The system has a null pointer dereference issue, where it dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this by sending crafted parameters, potentially causing a denial of service and the process to reboot.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾