What’s Vulnerable › Vulnerabilities

CVE-2019-5285

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-04 · updated 2026-06-17
• Weakness: CWE-20

Description

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)

Affected products

• Huawei S12700 Firmware: v200r005c00, v200r006c00, v200r007c00, v200r008c00, v200r010c00, v200r011c10 (+2)
• Huawei S1700 Firmware: v200r008c00, v200r009c00, v200r010c00, v200r011c10, v200r012c00, v200r013c00
• Huawei S2300 Firmware: v200r003c00, v200r005c00, v200r008c00, v200r010c00, v200r011c10, v200r012c00 (+1)
• Huawei S2700 Firmware: v200r005c00, v200r006c00, v200r007c00, v200r008c00, v200r010c00, v200r011c10 (+2)
• Huawei S5300 Firmware: v200r003c00, v200r005c00, v200r008c00, v200r010c00, v200r011c10, v200r012c00 (+1)
• Huawei S5700 Firmware: v200r003c00, v200r005c00, v200r006c00, v200r007c00, v200r008c00, v200r010c00 (+3)
• Huawei S600-E Firmware: v200r008c00, v200r010c00, v200r011c10, v200r012c00, v200r013c00
• Huawei S6300 Firmware: v200r003c00, v200r005c00, v200r007c00, v200r008c00, v200r010c00, v200r011c10 (+2)
• Huawei S6700 Firmware: v200r003c00, v200r005c00, v200r007c00, v200r008c00, v200r010c00, v200r011c10 (+2)
• Huawei S7700 Firmware: v200r003c00, v200r005c00, v200r006c00, v200r007c00, v200r008c00, v200r010c00 (+3)
• Huawei S7900 Firmware: v200r011c10, v200r012c00, v200r013c00
• Huawei S9300 Firmware: v200r003c00, v200r008c00, v200r008c10, v200r010c00, v200r011c10, v200r012c00 (+1)
• Huawei S9300X Firmware: v200r010c00, v200r011c10, v200r012c00, v200r013c00
• Huawei S9700 Firmware: v200r003c00, v200r005c00, v200r006c00, v200r007c00, v200r008c00, v200r010c00 (+3)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en

Get alerted when CVE-2019-5285 or the next vulnerability affects your stack