What’s Vulnerable › Vulnerabilities
CVE-2019-5256
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-12-13 · updated 2026-06-17
- Weakness: CWE-476
Description
Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a null pointer dereference vulnerability. The system dereferences a pointer that it expects to be valid, but is NULL. A local attacker could exploit this vulnerability by sending crafted parameters. A successful exploit could cause a denial of service and the process reboot.
Affected products
- Huawei Ap2000 Firmware: v200r005c30, v200r006c10, v200r006c20, v200r007c10, v200r007c20, v200r008c00 (+2)
- Huawei Espace U1981 Firmware: v200r003c50spc700
- Huawei Ips Firmware: v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 (+16)
- Huawei Ngfw Firmware: v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508, v500r001c20 (+18)
- Huawei Nip6300 Firmware: v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 (+16)
- Huawei Nip6600 Firmware: v500r001c00spc300, v500r001c00spc500, v500r001c00sph303, v500r001c00sph508, v500r001c20, v500r001c20spc100 (+15)
- Huawei Nip6800 Firmware: v500r001c50, v500r001c50pwe, v500r001c80, v500r005c00
- Huawei S5700 Firmware: v200r005c03
- Huawei Technologies Co., Ltd. Secospace AntiDDoS8000: v500r001c00, v500r001c00spc200, v500r001c00spc300, v500r001c00spc500, v500r001c00spc600, v500r001c00spc700 (+13)
- Huawei Secospace Usg6300 Firmware: v100r001c20spc100, v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508 (+20)
- Huawei Secospace Usg6500 Firmware: v100r001c20spc100, v500r001c00spc300, v500r001c00spc500, v500r001c00spc500pwe, v500r001c00sph303, v500r001c00sph508 (+20)
- Huawei Technologies Co., Ltd. Secospace USG6600: v100r001c00spc200, v100r001c10spc200, v100r001c10spc201, v100r001c20spc100, v100r001c20spc200, v500r001c00 (+45)
- Huawei Semg9811 Firmware: v500r002c20, v500r002c30, v500r005c00
- Huawei Svn5600 Firmware: v200r003c00spc100
- Huawei Svn5800-C Firmware: v200r003c00spc100
- Huawei Svn5800 Firmware: v200r003c00spc100
- Huawei USG6000V: v500r001c10, v500r001c10spc100, v500r001c10spc200, v500r001c20, v500r001c20spc100, v500r001c20spc200 (+7)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-ssp-en
Get alerted when CVE-2019-5256 or the next vulnerability affects your stack