CVE-2019-5273: Buffer Overflow
USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a large heap buffer overrun error, an attacker may exploit the vulnerability by a malicious certificate, resulting a denial of service on the affected products.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-5273.
What is the severity level of CVE-2019-5273?
The severity level of CVE-2019-5273 is high, with a CVSS score of 7.5.
Which products are affected by CVE-2019-5273?
USG9500 with versions V500R001C30 and V500R001C60 of Huawei Usg9500 Firmware are affected by CVE-2019-5273.
How can an attacker exploit CVE-2019-5273?
An attacker can exploit CVE-2019-5273 by using a malicious certificate, which triggers a large heap buffer overrun error in the X.509 implementation of the affected products.
Is there a fix available for CVE-2019-5273?
Yes, please refer to the security advisory from Huawei for information on how to apply the fix for CVE-2019-5273.