CVE-2019-19415

Published: Jul 8, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Vendor	Product	Versions
Huawei	AR120-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20 V200R008C30`
Huawei	AR1200	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20 V200R008C30`
Huawei	AR1200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	AR150	affected `V200R006C10` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` affected `V200R008C20` +1 more versions
Huawei	AR150-S	affected `V200R006C10SPC300` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	AR160	affected `V200R006C10` affected `V200R006C12` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` +2 more versions
Huawei	AR200	affected `V200R006C10` affected `V200R007C00` affected `V200R007C01` affected `V200R008C20` affected `V200R008C30`
Huawei	AR200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	AR2200	affected `V200R006C10` affected `V200R006C13` affected `V200R006C16PWE` affected `V200R007C00` affected `V200R007C01` +3 more versions
Huawei	AR2200-S	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	AR3200	affected `V200R006C10` affected `V200R006C11` affected `V200R007C00` affected `V200R007C01` affected `V200R007C02` +4 more versions
Huawei	AR3600	affected `V200R006C10` affected `V200R007C00` affected `V200R007C01` affected `V200R008C20`
Huawei	AR510	affected `V200R006C10` affected `V200R006C12` affected `V200R006C13` affected `V200R006C15` affected `V200R006C16` +7 more versions
Huawei	DP300	affected `V500R002C00`
Huawei	IPS Module	affected `V100R001C10` affected `V100R001C20` affected `V100R001C30` affected `V500R001C00` affected `V500R001C20` +2 more versions
Huawei	NGFW Module	affected `V100R001C10` affected `V100R001C20` affected `V100R001C30` affected `V500R001C00` affected `V500R001C20` +2 more versions
Huawei	NIP6300	affected `V500R001C00` affected `V500R001C20` affected `V500R001C30` affected `V500R001C50`
Huawei	NIP6600	affected `V500R001C00` affected `V500R001C20` affected `V500R001C30` affected `V500R001C50`
Huawei	NIP6800	affected `V500R001C30` affected `V500R001C50`
Huawei	NetEngine16EX	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	RSE6500	affected `V500R002C00`
Huawei	SMC2.0	affected `V100R003C00SPC200T` affected `V100R003C00SPC300T` affected `V100R003C00SPC301T` affected `V100R003C10` affected `V100R005C00SPC100` +7 more versions
Huawei	SRG1300	affected `V200R006C10` affected `V200R007C00` affected `V200R007C02` affected `V200R008C20` affected `V200R008C30`
Huawei	SRG2300	affected `V200R006C10` affected `V200R007C00` affected `V200R007C02` affected `V200R008C20` affected `V200R008C30`
Huawei	SRG3300	affected `V200R006C10` affected `V200R007C00` affected `V200R008C20` affected `V200R008C30`
Huawei	SVN5600	affected `V200R003C00` affected `V200R003C10`
Huawei	SVN5800	affected `V200R003C00` affected `V200R003C10`
Huawei	SVN5800-C	affected `V200R003C00` affected `V200R003C10`
Huawei	SeMG9811	affected `V300R001C01SPC500` affected `V300R001C01SPC500T` affected `V300R001C01SPC700` affected `V300R001C01SPCa00`
Huawei	Secospace USG6300	affected `V100R001C10` affected `V100R001C20` affected `V100R001C30` affected `V500R001C00` affected `V500R001C20` +2 more versions
Huawei	Secospace USG6500	affected `V100R001C10` affected `V100R001C20` affected `V100R001C30` affected `V500R001C00` affected `V500R001C20` +2 more versions
Huawei	Secospace USG6600	affected `V100R001C00` affected `V100R001C10` affected `V100R001C20` affected `V100R001C30` affected `V500R001C00` +3 more versions
Huawei	SoftCo	affected `V200R001C01SPC300` affected `V200R001C01SPC400` affected `V200R001C01SPC500` affected `V200R001C01SPC600` affected `V200R001C01SPH703` +5 more versions
Huawei	TE30	affected `V100R001C02SPC100` affected `V100R001C02SPC200 V100R001C10` affected `V500R002C00SPC200` affected `V500R002C00SPC600` affected `V500R002C00SPC700` +3 more versions
Huawei	TE40	affected `V500R002C00SPC600` affected `V500R002C00SPC700` affected `V500R002C00SPC900` affected `V500R002C00SPCb00` affected `V600R006C00`
Huawei	TE50	affected `V500R002C00SPC600` affected `V500R002C00SPCb00` affected `V600R006C00`
Huawei	TE60	affected `V100R001C01SPC100` affected `V100R001C10` affected `V100R001C10SPC300` affected `V100R001C10SPC400` affected `V100R001C10SPC500` +15 more versions
Huawei	TP3206	affected `V100R002C00`
Huawei	USG9500	affected `V300R001C01` affected `V300R001C20` affected `V500R001C00` affected `V500R001C20` affected `V500R001C30` +1 more versions
Huawei	USG9520	affected `V300R001C01SPC800PWE`
Huawei	USG9560	affected `V300R001C20SPC300`
Huawei	VP9660	affected `V200R001C02SPC100` affected `V200R001C02SPC200` affected `V200R001C02SPC300` affected `V200R001C02SPC300T` affected `V200R001C02SPC400` +45 more versions
Huawei	ViewPoint 8660	affected `V100R008C03B013SP02` affected `V100R008C03B013SP03` affected `V100R008C03B013SP04` affected `V100R008C03SPC100` affected `V100R008C03SPC200` +10 more versions
Huawei	ViewPoint 9030	affected `V100R011C02SPC100` affected `V100R011C03B012SP15` affected `V100R011C03B012SP16` affected `V100R011C03B015SP03` affected `V100R011C03LGWL01SPC100` +6 more versions
Huawei	eSpace U1910	affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC500` affected `V100R001C20SPC600` affected `V100R001C20SPH703` +3 more versions
Huawei	eSpace U1911	affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC500` affected `V100R001C20SPC600` affected `V100R001C20SPH309` +4 more versions
Huawei	eSpace U1930	affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC500` affected `V100R001C20SPC600` affected `V100R001C20SPH703` +3 more versions
Huawei	eSpace U1960	affected `V100R001C01SPC500` affected `V100R001C20LCRW01T` affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC600` +6 more versions
Huawei	eSpace U1980	affected `V100R001C01SPC500T` affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC500T` affected `V100R001C20SPC502` +6 more versions
Huawei	eSpace U1981	affected `V100R001C20SPC300` affected `V100R001C20SPC400` affected `V100R001C20SPC500` affected `V100R001C20SPC600` affected `V100R001C20SPC700` +6 more versions

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-19415

Description

Affected Products

References