CVE-2019-5304

Published Jan 3, 2020 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-14909 Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
History

No history.

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Sources

Status
PUBLISHED
Assigner
huawei
Published
Updated
Aug 4, 2024, 7:54 PM
Reserved
Jan 4, 2019, 12:00 AM
Status
Modified
Published
Jan 3, 2020, 3:15 PM
Modified
Jun 17, 2026, 2:37 AM