What’s Vulnerable › Vulnerabilities

CVE-2019-5293

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-13 · updated 2026-06-17
• Weakness: CWE-401

Description

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.

Affected products

• Huawei Ar120-S Firmware: v200r005c20, v200r006c10
• Huawei Ar1200-S Firmware: v200r005c20, v200r006c10
• Huawei Ar1200 Firmware: v200r005c20, v200r006c10
• Huawei Ar150-S Firmware: v200r005c20, v200r006c10
• Huawei Ar150 Firmware: v200r005c20, v200r006c10
• Huawei Ar160 Firmware: v200r005c20, v200r006c10
• Huawei Ar200-S Firmware: v200r005c20, v200r006c10
• Huawei Ar200 Firmware: v200r005c20, v200r006c10
• Huawei Ar2200-S Firmware: v200r005c20, v200r006c10
• Huawei Ar2200 Firmware: v200r005c20, v200r006c10
• Huawei AR3200: v200r005c20, v200r006c10
• Huawei Ar3600 Firmware: v200r006c10
• Huawei Netengine16Ex Firmware: v200r005c20, v200r006c10
• Huawei Srg1300 Firmware: v200r005c20, v200r006c10
• Huawei Srg2300 Firmware: v200r005c20, v200r006c10
• Huawei Srg3300 Firmware: v200r005c20, v200r006c10

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en

Get alerted when CVE-2019-5293 or the next vulnerability affects your stack