medium
5.5
CWE
119 120
Advisory Published
Updated

CVE-2019-5258: Buffer Overflow

First published: Fri Dec 13 2019(Updated: )

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei AP2000 firmware=v200r005c30
Huawei AP2000 firmware=v200r006c10
Huawei AP2000 firmware=v200r006c20
Huawei AP2000 firmware=v200r007c10
Huawei AP2000 firmware=v200r007c20
Huawei AP2000 firmware=v200r008c00
Huawei AP2000 firmware=v200r008c10
Huawei AP2000 firmware=v200r009c00
Huawei AP2000 firmware
Huawei IPS firmware=v500r001c00spc300
Huawei IPS firmware=v500r001c00spc500
Huawei IPS firmware=v500r001c00sph303
Huawei IPS firmware=v500r001c00sph508
Huawei IPS firmware=v500r001c20
Huawei IPS firmware=v500r001c20spc100
Huawei IPS firmware=v500r001c20spc100pwe
Huawei IPS firmware=v500r001c20spc200
Huawei IPS firmware=v500r001c20spc200b062
Huawei IPS firmware=v500r001c20spc200pwe
Huawei IPS firmware=v500r001c20spc300b078
Huawei IPS firmware=v500r001c20spc300pwe
Huawei IPS firmware=v500r001c30
Huawei IPS firmware=v500r001c30spc100
Huawei IPS firmware=v500r001c30spc100pwe
Huawei IPS firmware=v500r001c30spc200
Huawei IPS firmware=v500r001c30spc200pwe
Huawei IPS firmware=v500r001c30spc300
Huawei IPS firmware=v500r001c50
Huawei IPS firmware=v500r001c50pwe
Huawei IPS firmware=v500r001c80
Huawei IPS firmware=v500r005c00
Huawei IPS
Huawei NGFW Module firmware=v500r001c00spc300
Huawei NGFW Module firmware=v500r001c00spc500
Huawei NGFW Module firmware=v500r001c00spc500pwe
Huawei NGFW Module firmware=v500r001c00sph303
Huawei NGFW Module firmware=v500r001c00sph508
Huawei NGFW Module firmware=v500r001c20
Huawei NGFW Module firmware=v500r001c20spc100
Huawei NGFW Module firmware=v500r001c20spc100pwe
Huawei NGFW Module firmware=v500r001c20spc200
Huawei NGFW Module firmware=v500r001c20spc200b062
Huawei NGFW Module firmware=v500r001c20spc200pwe
Huawei NGFW Module firmware=v500r001c20spc300b078
Huawei NGFW Module firmware=v500r001c20spc300pwe
Huawei NGFW Module firmware=v500r002c00
Huawei NGFW Module firmware=v500r002c00spc100
Huawei NGFW Module firmware=v500r002c00spc100pwe
Huawei NGFW Module firmware=v500r002c00spc200
Huawei NGFW Module firmware=v500r002c00spc200pwe
Huawei NGFW Module firmware=v500r002c00spc300
Huawei NGFW Module firmware=v500r002c10
Huawei NGFW Module firmware=v500r002c10pwe
Huawei NGFW Module firmware=v500r002c30
Huawei NGFW Module firmware=v500r002c30pwe
Huawei NGFW Module firmware=v500r005c00
Huawei NGFW Module firmware
Huawei NIP6300 firmware=v500r001c00spc300
Huawei NIP6300 firmware=v500r001c00spc500
Huawei NIP6300 firmware=v500r001c00sph303
Huawei NIP6300 firmware=v500r001c00sph508
Huawei NIP6300 firmware=v500r001c20
Huawei NIP6300 firmware=v500r001c20spc100
Huawei NIP6300 firmware=v500r001c20spc100pwe
Huawei NIP6300 firmware=v500r001c20spc200
Huawei NIP6300 firmware=v500r001c20spc200b062
Huawei NIP6300 firmware=v500r001c20spc200pwe
Huawei NIP6300 firmware=v500r001c20spc300b078
Huawei NIP6300 firmware=v500r001c20spc300pwe
Huawei NIP6300 firmware=v500r001c30
Huawei NIP6300 firmware=v500r001c30spc100
Huawei NIP6300 firmware=v500r001c30spc100pwe
Huawei NIP6300 firmware=v500r001c30spc200
Huawei NIP6300 firmware=v500r001c30spc200pwe
Huawei NIP6300 firmware=v500r001c30spc300
Huawei NIP6300 firmware=v500r001c50
Huawei NIP6300 firmware=v500r001c50pwe
Huawei NIP6300 firmware=v500r001c80
Huawei NIP6300 firmware=v500r005c00
Huawei NIP6300 firmware
Huawei NIP6600=v500r001c00spc300
Huawei NIP6600=v500r001c00spc500
Huawei NIP6600=v500r001c00sph303
Huawei NIP6600=v500r001c00sph508
Huawei NIP6600=v500r001c20
Huawei NIP6600=v500r001c20spc100
Huawei NIP6600=v500r001c20spc100pwe
Huawei NIP6600=v500r001c20spc200
Huawei NIP6600=v500r001c20spc200b062
Huawei NIP6600=v500r001c20spc200pwe
Huawei NIP6600=v500r001c20spc300b078
Huawei NIP6600=v500r001c30
Huawei NIP6600=v500r001c30spc100
Huawei NIP6600=v500r001c30spc100pwe
Huawei NIP6600=v500r001c30spc200
Huawei NIP6600=v500r001c30spc200pwe
Huawei NIP6600=v500r001c30spc300
Huawei NIP6600=v500r001c50
Huawei NIP6600=v500r001c50pwe
Huawei NIP6600=v500r001c80
Huawei NIP6600=v500r005c00
Huawei NIP6600 firmware
Huawei NIP6800 Firmware=v500r001c50
Huawei NIP6800 Firmware=v500r001c50pwe
Huawei NIP6800 Firmware=v500r001c80
Huawei NIP6800 Firmware=v500r005c00
Huawei NIP6800 Firmware
Huawei Campus S5700 firmware=v200r005c03
Huawei S5700 Firmware
Huawei SVN5600 firmware=v200r003c00spc100
Huawei SVN5600
Huawei SVN5800 firmware=v200r003c00spc100
Huawei SVN5800
Huawei SVN5800-C firmware=v200r003c00spc100
Huawei SVN5800-C
Huawei SeMG9811=v500r002c20
Huawei SeMG9811=v500r002c30
Huawei SeMG9811=v500r005c00
Huawei SeMG9811 firmware
Huawei Secospace AntiDDoS8000=v500r001c00
Huawei Secospace AntiDDoS8000=v500r001c00spc200
Huawei Secospace AntiDDoS8000=v500r001c00spc300
Huawei Secospace AntiDDoS8000=v500r001c00spc500
Huawei Secospace AntiDDoS8000=v500r001c00spc600
Huawei Secospace AntiDDoS8000=v500r001c00spc700
Huawei Secospace AntiDDoS8000=v500r001c00sph303
Huawei Secospace AntiDDoS8000=v500r001c20spc200
Huawei Secospace AntiDDoS8000=v500r001c20spc300
Huawei Secospace AntiDDoS8000=v500r001c20spc500
Huawei Secospace AntiDDoS8000=v500r001c20spc600
Huawei Secospace AntiDDoS8000=v500r001c60spc100
Huawei Secospace AntiDDoS8000=v500r001c60spc101
Huawei Secospace AntiDDoS8000=v500r001c60spc200
Huawei Secospace AntiDDoS8000=v500r001c60spc300
Huawei Secospace AntiDDoS8000=v500r001c60spc500
Huawei Secospace AntiDDoS8000=v500r001c60spc600
Huawei Secospace AntiDDoS8000=v500r005c00
Huawei Secospace AntiDDoS8000=v500r005c00spc100
Huawei Secospace AntiDDoS8000
Huawei USG6300E firmware=v100r001c20spc100
Huawei USG6300E firmware=v500r001c00spc300
Huawei USG6300E firmware=v500r001c00spc500
Huawei USG6300E firmware=v500r001c00spc500pwe
Huawei USG6300E firmware=v500r001c00sph303
Huawei USG6300E firmware=v500r001c00sph508
Huawei USG6300E firmware=v500r001c20
Huawei USG6300E firmware=v500r001c20spc100
Huawei USG6300E firmware=v500r001c20spc100pwe
Huawei USG6300E firmware=v500r001c20spc101
Huawei USG6300E firmware=v500r001c20spc200
Huawei USG6300E firmware=v500r001c20spc200b062
Huawei USG6300E firmware=v500r001c20spc200pwe
Huawei USG6300E firmware=v500r001c20spc300b078
Huawei USG6300E firmware=v500r001c20spc300pwe
Huawei USG6300E firmware=v500r001c30
Huawei USG6300E firmware=v500r001c30spc100
Huawei USG6300E firmware=v500r001c30spc100pwe
Huawei USG6300E firmware=v500r001c30spc200
Huawei USG6300E firmware=v500r001c30spc200pwe
Huawei USG6300E firmware=v500r001c30spc300
Huawei USG6300E firmware=v500r001c50
Huawei USG6300E firmware=v500r001c50pwe
Huawei USG6300E firmware=v500r001c80
Huawei USG6300E firmware=v500r001c80pwe
Huawei USG6300E firmware=v500r005c00
Huawei Secospace USG6300 firmware
Huawei Secospace USG6500=v100r001c20spc100
Huawei Secospace USG6500=v500r001c00spc300
Huawei Secospace USG6500=v500r001c00spc500
Huawei Secospace USG6500=v500r001c00spc500pwe
Huawei Secospace USG6500=v500r001c00sph303
Huawei Secospace USG6500=v500r001c00sph508
Huawei Secospace USG6500=v500r001c20
Huawei Secospace USG6500=v500r001c20spc100
Huawei Secospace USG6500=v500r001c20spc100pwe
Huawei Secospace USG6500=v500r001c20spc101
Huawei Secospace USG6500=v500r001c20spc200
Huawei Secospace USG6500=v500r001c20spc200b062
Huawei Secospace USG6500=v500r001c20spc200pwe
Huawei Secospace USG6500=v500r001c20spc300b078
Huawei Secospace USG6500=v500r001c20spc300pwe
Huawei Secospace USG6500=v500r001c30
Huawei Secospace USG6500=v500r001c30spc100
Huawei Secospace USG6500=v500r001c30spc100pwe
Huawei Secospace USG6500=v500r001c30spc200
Huawei Secospace USG6500=v500r001c30spc200pwe
Huawei Secospace USG6500=v500r001c30spc300
Huawei Secospace USG6500=v500r001c50
Huawei Secospace USG6500=v500r001c50pwe
Huawei Secospace USG6500=v500r001c80
Huawei Secospace USG6500=v500r001c80pwe
Huawei Secospace USG6500=v500r005c00
Huawei Secospace USG6500 firmware
Huawei Secospace USG6600 firmware=v100r001c00spc200
Huawei Secospace USG6600 firmware=v100r001c10spc200
Huawei Secospace USG6600 firmware=v100r001c10spc201
Huawei Secospace USG6600 firmware=v100r001c20spc100
Huawei Secospace USG6600 firmware=v100r001c20spc200
Huawei Secospace USG6600 firmware=v500r001c00
Huawei Secospace USG6600 firmware=v500r001c00spc050
Huawei Secospace USG6600 firmware=v500r001c00spc090
Huawei Secospace USG6600 firmware=v500r001c00spc300
Huawei Secospace USG6600 firmware=v500r001c00spc500
Huawei Secospace USG6600 firmware=v500r001c00spc500pwe
Huawei Secospace USG6600 firmware=v500r001c00sph303
Huawei Secospace USG6600 firmware=v500r001c20
Huawei Secospace USG6600 firmware=v500r001c20spc100
Huawei Secospace USG6600 firmware=v500r001c20spc100pwe
Huawei Secospace USG6600 firmware=v500r001c20spc101
Huawei Secospace USG6600 firmware=v500r001c20spc200
Huawei Secospace USG6600 firmware=v500r001c20spc200pwe
Huawei Secospace USG6600 firmware=v500r001c20spc300
Huawei Secospace USG6600 firmware=v500r001c20spc300b078
Huawei Secospace USG6600 firmware=v500r001c20spc300pwe
Huawei Secospace USG6600 firmware=v500r001c30
Huawei Secospace USG6600 firmware=v500r001c30spc100
Huawei Secospace USG6600 firmware=v500r001c30spc100pwe
Huawei Secospace USG6600 firmware=v500r001c30spc200
Huawei Secospace USG6600 firmware=v500r001c30spc200pwe
Huawei Secospace USG6600 firmware=v500r001c30spc300
Huawei Secospace USG6600 firmware=v500r001c30spc500
Huawei Secospace USG6600 firmware=v500r001c30spc600
Huawei Secospace USG6600 firmware=v500r001c30spc600pwe
Huawei Secospace USG6600 firmware=v500r001c30spc601
Huawei Secospace USG6600 firmware=v500r001c50
Huawei Secospace USG6600 firmware=v500r001c50pwe
Huawei Secospace USG6600 firmware=v500r001c50spc009
Huawei Secospace USG6600 firmware=v500r001c50spc100
Huawei Secospace USG6600 firmware=v500r001c50spc100pwe
Huawei Secospace USG6600 firmware=v500r001c50spc200
Huawei Secospace USG6600 firmware=v500r001c50spc200pwe
Huawei Secospace USG6600 firmware=v500r001c50spc300
Huawei Secospace USG6600 firmware=v500r001c60
Huawei Secospace USG6600 firmware=v500r001c60spc100
Huawei Secospace USG6600 firmware=v500r001c60spc100pwe
Huawei Secospace USG6600 firmware=v500r001c60spc200
Huawei Secospace USG6600 firmware=v500r001c60spc200pwe
Huawei Secospace USG6600 firmware=v500r001c60spc300
Huawei Secospace USG6600 firmware=v500r001c60spc500
Huawei Secospace USG6600 firmware=v500r001c80
Huawei Secospace USG6600 firmware=v500r001c80pwe
Huawei Secospace USG6600 firmware=v500r005c00
Huawei Secospace USG6600 firmware=v500r005c00spc100
Huawei Secospace USG6600 firmware=v500r005c00spc102
Huawei Secospace USG6600 firmware
Huawei USG6000V firmware=v500r001c10
Huawei USG6000V firmware=v500r001c10spc100
Huawei USG6000V firmware=v500r001c10spc200
Huawei USG6000V firmware=v500r001c20
Huawei USG6000V firmware=v500r001c20spc100
Huawei USG6000V firmware=v500r001c20spc200
Huawei USG6000V firmware=v500r001c20spc300
Huawei USG6000V firmware=v500r001c20spc500
Huawei USG6000V firmware=v500r001c20spc600
Huawei USG6000V firmware=v500r003c00
Huawei USG6000V firmware=v500r003c00spc100
Huawei USG6000V firmware=v500r005c00
Huawei USG6000V firmware=v500r005c00spc100
Huawei USG6000V firmware
Huawei eSpace U1981=v200r003c50spc700
Huawei eSpace unified gateway U1981

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-5258?

    CVE-2019-5258 is rated as high severity due to its potential for exploitation through buffer overflow.

  • How do I fix CVE-2019-5258?

    To fix CVE-2019-5258, update to the latest firmware versions provided by Huawei for the affected products.

  • Which Huawei products are affected by CVE-2019-5258?

    CVE-2019-5258 affects several Huawei products including AP2000, IPS Module, NGFW Module, NIP6300, among others.

  • What type of vulnerability is CVE-2019-5258?

    CVE-2019-5258 is a buffer overflow vulnerability.

  • Can CVE-2019-5258 be exploited remotely?

    Yes, an attacker can exploit CVE-2019-5258 after logging into the affected devices.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203