PT-2019-4440

CVE-2019-5298

·

Published

2019-03-27

·

Updated

2019-06-05

Description by

CVSS 3.1
6.8
Medium
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huawei AP2000 versions prior to V200R009C00SPC800 Huawei AP4000 versions prior to V200R009C00SPC800 Huawei AP4050DN-E versions prior to V200R009C00SPC800
Description The issue is related to improper authentication in the firmware of certain Huawei access point products. This could allow an attacker to execute arbitrary commands by exploiting the vulnerability through the serial port.
Recommendations For Huawei AP2000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4000 versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later. For Huawei AP4050DN-E versions prior to V200R009C00SPC800, update to version V200R009C00SPC800 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2019-5298
BDU:2020-00198
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com