Buffer overflow in Huawei products - CVE-2019-19415

Vulnerability identifier: #VU24353

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-19415

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the insufficient verification of the packets in the SIP module. A remote attacker can send a specially crafted message, trigger memory corruption and cause a denial of service on the target system.

Huawei TE60
Huawei TE30
Huawei TP3206
Huawei SMC2.0
Huawei TE50
Huawei TE40
Huawei DP300
Huawei eSpace U1910
Huawei eSpace U1980
Huawei eSpace U1911
Huawei eSpace U1930
Huawei eSpace U1960
Huawei ViewPoint 8660
Huawei ViewPoint 9030
Huawei SoftCo
Huawei eSpace U1981
Huawei Secospace USG6600
Huawei Secospace USG6500
Huawei Secospace USG6300
Huawei NGFW Module
Huawei SVN5800-C
Huawei SVN5800
Huawei SVN5600
Huawei IPS Module
Huawei NIP6600
Huawei NIP6300
Huawei NIP6800
Huawei VP9660
Huawei AR2200
Huawei AR150-S
Huawei AR150
Huawei AR1200-S
Huawei AR160
Huawei AR200
Huawei AR200-S
Huawei AR1200
Huawei AR2200-S
Huawei AR3200
Huawei AR3600
Huawei AR120-S
Huawei SRG3300
Huawei SRG2300
Huawei SRG1300
Huawei NetEngine16EX
Huawei AR510
Huawei USG9560
Huawei USG9520
USG9500
Huawei SeMG9811
RSE6500

Install updates from vendor's website.

Huawei TE60 - update to V600R006C00SPC400
Huawei TE30 - update to V600R006C00SPC400
Huawei eSpace U1981 - update to V200R003C30SPC500
Huawei Secospace USG6600 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei Secospace USG6500 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei Secospace USG6300 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei NGFW Module - addressed in versions V500R002SPH015, V500R002C20SPC500
Huawei IPS Module - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei TP3206 - update to V100R002C00SPC800
Huawei SMC2.0 - addressed in versions V500R002C00SPCc00, V600R006C00SPC300
Huawei ViewPoint 8660 - update to V100R008C03SPCe00
Huawei ViewPoint 9030 - update to V100R011C03SPC800
Huawei VP9660 - update to V500R002C10SPC800
Huawei SVN5800-C - update to V200R003C10SPCa00
Huawei SVN5800 - update to V200R003C10SPCa00
Huawei SVN5600 - update to V200R003C10SPCa00
Huawei AR2200 - update to V200R009C00
Huawei AR150-S - update to V200R009C00
Huawei AR150 - update to V200R009C00
Huawei AR1200-S - update to V200R009C00
Huawei AR200 - update to V200R009C00
Huawei AR200-S - update to V200R009C00
Huawei AR1200 - update to V200R009C00
Huawei AR2200-S - update to V200R009C00
Huawei AR3200 - update to V200R009C00
Huawei AR3600 - update to V200R009C00
Huawei AR120-S - update to V200R009C00
Huawei SRG3300 - update to V200R009C00
Huawei SRG2300 - update to V200R009C00
Huawei SRG1300 - update to V200R009C00
Huawei NetEngine16EX - update to V200R009C00
Huawei AR510 - update to V200R009C00
Huawei SeMG9811 - addressed in versions V500R002SPH015, V500R002C20SPC500
Huawei USG9560 - update to V500R002C10SPC100
Huawei USG9520 - update to V500R002C10SPC100
USG9500 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei NIP6600 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei NIP6300 - addressed in versions V500R001SPH015, V500R001C60SPC500, V500R002SPH015
Huawei NIP6800 - addressed in versions V500R001SPH015, V500R001C60SPC500
Huawei TE50 - update to V600R006C00SPC400
Huawei TE40 - update to V600R006C00SPC400
Huawei DP300 - update to V500R002C00SPCb00
RSE6500 - update to V500R002C00SPC800

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en

• Multiple vulnerabilities in Some Huawei Products