CVE-2019-19411: Medium severity huawei unified security gateway firmware vulnerability
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-19411.
What is the severity level of CVE-2019-19411?
The severity level of CVE-2019-19411 is medium.
Which versions of USG9500 are affected by CVE-2019-19411?
Versions V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, and V500R005C00SPC200 of USG9500 are affected by CVE-2019-19411.
What is the description of the vulnerability?
USG9500 with the affected versions has an information leakage vulnerability due to improper processing of the initialization vector used in a specific encryption algorithm.
How can the attacker exploit CVE-2019-19411?
An attacker who gains access to the encryption algorithm's initialization vector can exploit CVE-2019-19411 to gain unauthorized access to sensitive information.