What’s Vulnerable › Vulnerabilities

CVE-2019-19411

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-21 · updated 2026-06-17
• Weakness: CWE-665

Description

USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.

Affected products

• Huawei USG9500: v500r001c30spc100, v500r001c30spc200, v500r001c30spc600, v500r001c60spc500, v500r005c00spc100, v500r005c00spc200

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-firewall-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-firewall-en

Get alerted when CVE-2019-19411 or the next vulnerability affects your stack