Buffer overflow in Huawei products - CVE-2019-5304

Vulnerability identifier: #VU23898

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-5304

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service (DoS) condition.

The vulnerability exists due to insufficient input validation of some parameters in the messages. A remote attacker can send a specific MPLS Echo Request message, trigger memory corruption and reset the device.

Huawei AR2200-S
Huawei SRG2300
Huawei AR150-S
Huawei AR200
Huawei AR150
Huawei SRG1300
Huawei AR200-S
Huawei AR3200
Huawei AR1200-S
Huawei SRG3300
Huawei AR1200
Huawei AR2200
Huawei S6700
Huawei AR160
Huawei NetEngine16EX
Huawei AR120-S
Huawei AR3600
Huawei S5700
Huawei Secospace AntiDDoS8000
Huawei IPS Module
Huawei NIP6300
Huawei NIP6600
Huawei Secospace USG6300
Huawei Secospace USG6500
Huawei Secospace USG6600
Huawei NGFW Module

Install updates from vendor's website.

Huawei AR2200-S - update to V200R009C00SPC500
Huawei SRG2300 - update to V200R009C00SPC500
Huawei AR150-S - update to V200R009C00SPC500
Huawei AR200 - update to V200R009C00SPC500
Huawei AR150 - update to V200R009C00SPC500
Huawei SRG1300 - update to V200R009C00SPC500
Huawei AR200-S - update to V200R009C00SPC500
Huawei AR3200 - update to V200R009C00SPC500
Huawei AR1200-S - update to V200R009C00SPC500
Huawei SRG3300 - update to V200R009C00SPC500
Huawei AR1200 - update to V200R009C00SPC500
Huawei AR2200 - update to V200R009C00SPC500
Huawei S5700 - update to V200R011C10
Huawei S6700 - update to V200R011C10
Huawei AR160 - update to V200R009C00SPC500
Huawei NetEngine16EX - update to V200R009C00SPC500
Huawei AR120-S - update to V200R009C00SPC500
Huawei AR3600 - update to V200R009C00SPC500
Huawei Secospace AntiDDoS8000 - update to V500R005C00SPC300
Huawei Secospace USG6300 - update to V500R002C00SPC200
Huawei Secospace USG6500 - update to V500R002C00SPC200
Huawei IPS Module - update to V500R002C00SPC200
Huawei NGFW Module - update to V500R002C00SPC200
Huawei NIP6300 - update to V500R002C00SPC200
Huawei Secospace USG6600 - update to V500R005C00SPC200
Huawei NIP6600 - update to V500R002C00SPC200

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en

• Denial of service in Some Huawei Products