What’s Vulnerable › Vulnerabilities

CVE-2019-5304

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-03 · updated 2026-06-17
• Weakness: CWE-120

Description

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.

Affected products

• Huawei Ar120-S Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar1200-S Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar1200 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar150-S Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar150 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar160 Firmware: v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar200-S Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar200 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar2200-S Firmware: v200r003c01, v200r005c20, v200r006c10, v200r008c20, v200r008c50
• Huawei Ar2200 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei AR3200: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ar3600 Firmware: v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ips Module Firmware: v500r001c20, v500r001c30
• Huawei Netengine16Ex Firmware: v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Ngfw Module Firmware: v500r001c20, v500r002c00
• Huawei Nip6300 Firmware: v500r001c20, v500r001c30
• Huawei Nip6600 Firmware: v500r001c20, v500r001c30
• Huawei S5700 Firmware: v200r005c00, v200r005c02, v200r005c03, v200r006c00, v200r007c00, v200r008c00 (+2)
• Huawei S6700 Firmware: v200r005c00, v200r005c01, v200r005c02, v200r008c00, v200r010c00, v200r011c00
• Huawei Technologies Co., Ltd. Secospace AntiDDoS8000: v500r001c20, v500r001c60, v500r005c00
• Huawei Secospace Usg6300 Firmware: v500r001c20, v500r001c30
• Huawei Secospace Usg6500 Firmware: v500r001c20, v500r001c30
• Huawei Technologies Co., Ltd. Secospace USG6600: v500r001c20, v500r001c30
• Huawei Srg1300 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Srg2300 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50
• Huawei Srg3300 Firmware: v200r003c01, v200r005c20, v200r006c10, v200r007c00, v200r008c20, v200r008c50

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-buffer-en

Get alerted when CVE-2019-5304 or the next vulnerability affects your stack