CVE-2019-19415
Vulnérabilité non évaluée dans AR120-S (Huawei)
CVSS 0.0 · Non évaluée
EPSS 0.9%
Huawei•AR120-S•Versions : V100R005C00SPC101B001T, V300R001C01SPCa00, V100R001C01SPC100, V200R001C30SPCa00T, V500R002C00SPC700, V100R011C03SPC100, V200R001C30SPC300, V200R008C20 V200R008C30, V100R001C20, V200R003C00SPC500, V200R006C13, V200R003C00SPC100, V300R001C20, V100R008C03B013SP03, V100R011C02SPC100, V200R001C30SPC404T, V200R001C30SPC100B015T, V200R001C30SPC102T, V500R002C00SPC300, V100R005C00SPC102, V300R001C01SPC700, V500R002C00SPC100, V200R001C01SPC500, V100R001C30, V200R001C30SPC900, V100R003C00SPC200T, V100R001C00, V200R001C02SPC200, V100R001C20SPC600, V100R011C03SPC500, V200R001C30SPC400B001, V300R001C01SPC500T, V200R001C30SPC700T, V100R008C03SPC900, V500R002C00SPCb00, V200R001C30SPC700, V500R001C20, V100R001C02SPC100, V200R001C30SPCa01T, V100R008C03SPC500, V200R001C30SPC100, V200R001C30SPC400T, V100R001C10, V200R001C02SPC400, V200R001C01SPC300, V200R006C10SPC300, V100R008C03SPCb00, V200R001C30SPC208T, V200R003C00SPC200, V200R006C11, V100R011C03SPC300, V200R006C16, V200R001C30SPC600, V200R003C10, V100R003C00, V200R001C30SPC800T, V200R001C30SPCd, V200R001C30SPCc00, V200R001C30SPCd01T, V100R008C03SPCc00, V200R001C30SPCa01, V100R001C10SPC500, V100R001C20SPC600T, V100R011C03SPC200, V200R001C30SPC200, V200R001C01SPC400, V200R007C00SPC180T, V500R002C00, V200R001C30SPC101TB015, V500R002C00SPC800, V200R001C30SPC202B025T, V600R006C00, V200R001C02SPC300T, V600R006C00SPC200, V100R008C03SPC600, V200R003C20, V100R008C03SPC800, V200R001C02SPC300, V100R001C01SPC500, V100R011C03B015SP03, V200R001C01SPC600, V200R003C00, V100R008C03SPC100, V500R002C00SPC900, V200R003C00SPC300, V100R001C20SPC502, V300R001C01SPC500, V100R001C20SPC400, V100R005C00SPC201T, V200R001C30SPCa02T, V200R007C00SPC900, V200R006C10, V200R001C30SPCd00T, V200R007C01, V100R011C03LGWL01SPC100, V200R001C02SPC100, V100R001C20SPH703, V500R001C50, V200R001C30SPC400, V100R001C20SPC700, V200R007C02, V200R001C30SPC207T, V100R001C10SPC400, V100R011C03SPC400, V100R011C03B012SP16, V200R001C30SPC402T, V100R005C00SPC200, V500R002C00SPC600, V200R006C17, V100R001C10SPC300, V100R008C03SPC700, V100R002C00, V200R001C30SPC800, V100R008C03B013SP04, V100R001C20SPH309, V500R002C00SPC200, V300R001C20SPC300, V100R011C03LGWL01SPC100B012, V100R008C03SPC300, V100R001C10SPC800, V200R001C30SPC203T, V200R001C30SPC201B023T, V200R007C00SPCb00, V100R008C03B013SP02, V200R001C30SPC209T, V100R001C20LCRW01T, V100R008C03SPC400, V300R001C01SPC800PWE, V100R001C20SPC500, V200R001C30SPC702T, V200R001C30SPCb00, V200R001C30SPC403T, V200R001C30SPC101, V100R001C02SPC200 V100R001C10, V100R005C00SPC103, V200R006C15, V500R001C00, V100R001C20SPC500T, V200R007C00, V200R006C12, V500R001C30, V200R008C00, V200R001C01SPH703, V500R002C10, V100R001C10SPC600, V100R001C01SPC500T, V100R001C20SPH702, V100R003C00SPC301T, V200R001C30SPC206T, V200R001C30SPC703T, V100R003C00SPC300T, V100R008C03SPCa00, V200R001C30SPC103T, V200R001C30SPC401T, V100R008C03SPC200, V500R002C00SPCa00, V100R003C10, V300R001C01, V200R008C20, V200R001C30SPC701T, V200R001C30SPC200B022T, V200R001C30SPCa00, V200R003C30, V200R001C30SPC405T, V100R011C03B012SP15, V200R001C30SPC104T, V200R006C16PWE, V200R007C00SPC600, V100R001C20SPC300, V200R008C30, V200R008C10, V100R005C00SPC100, V200R001C30SPCd00
Description
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Gravité et risque d'exploitation
CVE-2019-19415 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.88 %, ce qui la place devant 58.5 % des CVE référencées.
Que faire ?
- Vérifiez si AR120-S (versions V100R005C00SPC101B001T, V300R001C01SPCa00, V100R001C01SPC100, V200R001C30SPCa00T, V500R002C00SPC700, V100R011C03SPC100, V200R001C30SPC300, V200R008C20 V200R008C30, V100R001C20, V200R003C00SPC500, V200R006C13, V200R003C00SPC100, V300R001C20, V100R008C03B013SP03, V100R011C02SPC100, V200R001C30SPC404T, V200R001C30SPC100B015T, V200R001C30SPC102T, V500R002C00SPC300, V100R005C00SPC102, V300R001C01SPC700, V500R002C00SPC100, V200R001C01SPC500, V100R001C30, V200R001C30SPC900, V100R003C00SPC200T, V100R001C00, V200R001C02SPC200, V100R001C20SPC600, V100R011C03SPC500, V200R001C30SPC400B001, V300R001C01SPC500T, V200R001C30SPC700T, V100R008C03SPC900, V500R002C00SPCb00, V200R001C30SPC700, V500R001C20, V100R001C02SPC100, V200R001C30SPCa01T, V100R008C03SPC500, V200R001C30SPC100, V200R001C30SPC400T, V100R001C10, V200R001C02SPC400, V200R001C01SPC300, V200R006C10SPC300, V100R008C03SPCb00, V200R001C30SPC208T, V200R003C00SPC200, V200R006C11, V100R011C03SPC300, V200R006C16, V200R001C30SPC600, V200R003C10, V100R003C00, V200R001C30SPC800T, V200R001C30SPCd, V200R001C30SPCc00, V200R001C30SPCd01T, V100R008C03SPCc00, V200R001C30SPCa01, V100R001C10SPC500, V100R001C20SPC600T, V100R011C03SPC200, V200R001C30SPC200, V200R001C01SPC400, V200R007C00SPC180T, V500R002C00, V200R001C30SPC101TB015, V500R002C00SPC800, V200R001C30SPC202B025T, V600R006C00, V200R001C02SPC300T, V600R006C00SPC200, V100R008C03SPC600, V200R003C20, V100R008C03SPC800, V200R001C02SPC300, V100R001C01SPC500, V100R011C03B015SP03, V200R001C01SPC600, V200R003C00, V100R008C03SPC100, V500R002C00SPC900, V200R003C00SPC300, V100R001C20SPC502, V300R001C01SPC500, V100R001C20SPC400, V100R005C00SPC201T, V200R001C30SPCa02T, V200R007C00SPC900, V200R006C10, V200R001C30SPCd00T, V200R007C01, V100R011C03LGWL01SPC100, V200R001C02SPC100, V100R001C20SPH703, V500R001C50, V200R001C30SPC400, V100R001C20SPC700, V200R007C02, V200R001C30SPC207T, V100R001C10SPC400, V100R011C03SPC400, V100R011C03B012SP16, V200R001C30SPC402T, V100R005C00SPC200, V500R002C00SPC600, V200R006C17, V100R001C10SPC300, V100R008C03SPC700, V100R002C00, V200R001C30SPC800, V100R008C03B013SP04, V100R001C20SPH309, V500R002C00SPC200, V300R001C20SPC300, V100R011C03LGWL01SPC100B012, V100R008C03SPC300, V100R001C10SPC800, V200R001C30SPC203T, V200R001C30SPC201B023T, V200R007C00SPCb00, V100R008C03B013SP02, V200R001C30SPC209T, V100R001C20LCRW01T, V100R008C03SPC400, V300R001C01SPC800PWE, V100R001C20SPC500, V200R001C30SPC702T, V200R001C30SPCb00, V200R001C30SPC403T, V200R001C30SPC101, V100R001C02SPC200 V100R001C10, V100R005C00SPC103, V200R006C15, V500R001C00, V100R001C20SPC500T, V200R007C00, V200R006C12, V500R001C30, V200R008C00, V200R001C01SPH703, V500R002C10, V100R001C10SPC600, V100R001C01SPC500T, V100R001C20SPH702, V100R003C00SPC301T, V200R001C30SPC206T, V200R001C30SPC703T, V100R003C00SPC300T, V100R008C03SPCa00, V200R001C30SPC103T, V200R001C30SPC401T, V100R008C03SPC200, V500R002C00SPCa00, V100R003C10, V300R001C01, V200R008C20, V200R001C30SPC701T, V200R001C30SPC200B022T, V200R001C30SPCa00, V200R003C30, V200R001C30SPC405T, V100R011C03B012SP15, V200R001C30SPC104T, V200R006C16PWE, V200R007C00SPC600, V100R001C20SPC300, V200R008C30, V200R008C10, V100R005C00SPC100, V200R001C30SPCd00) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.