CVE-2019-5248

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-12-13 · updated 2026-06-17
Weakness: CWE-401

Description

CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit this vulnerability to cause DoS attacks on the target device.

Affected products

CloudEngine 12800: v200r001c00spc600, v200r001c00spc700, v200r002c01, v200r002c50spc800, v200r002c50spc800pwe

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en

Get alerted when CVE-2019-5248 or the next vulnerability affects your stack