CVE-2019-5285: Input Validation
Published Jun 4, 2019
·Updated
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)
Affected Software
112 affected components
Huawei S12700 Firmware=v200r005c00
Huawei S12700 Firmware=v200r006c00
Huawei S12700 Firmware=v200r007c00
Huawei S12700 Firmware=v200r008c00
Huawei S12700 Firmware=v200r010c00
Huawei S12700 Firmware=v200r011c10
Huawei S12700 Firmware=v200r012c00
Huawei S12700 Firmware=v200r013c00
Huawei S12700
Huawei S1700 Firmware=v200r008c00
Huawei S1700 Firmware=v200r009c00
Huawei S1700 Firmware=v200r010c00
Huawei S1700 Firmware=v200r011c10
Huawei S1700 Firmware=v200r012c00
Huawei S1700 Firmware=v200r013c00
Huawei S1700
Huawei S2300 Firmware=v200r003c00
Huawei S2300 Firmware=v200r005c00
Huawei S2300 Firmware=v200r008c00
Huawei S2300 Firmware=v200r010c00
Huawei S2300 Firmware=v200r011c10
Huawei S2300 Firmware=v200r012c00
Huawei S2300 Firmware=v200r013c00
Huawei S2300
Huawei S2700 Firmware=v200r005c00
Huawei S2700 Firmware=v200r006c00
Huawei S2700 Firmware=v200r007c00
Huawei S2700 Firmware=v200r008c00
Huawei S2700 Firmware=v200r010c00
Huawei S2700 Firmware=v200r011c10
Huawei S2700 Firmware=v200r012c00
Huawei S2700 Firmware=v200r013c00
Huawei S2700
Huawei S5300 Firmware=v200r003c00
Huawei S5300 Firmware=v200r005c00
Huawei S5300 Firmware=v200r008c00
Huawei S5300 Firmware=v200r010c00
Huawei S5300 Firmware=v200r011c10
Huawei S5300 Firmware=v200r012c00
Huawei S5300 Firmware=v200r013c00
Huawei S5300
Huawei S5700 Firmware=v200r003c00
Huawei S5700 Firmware=v200r005c00
Huawei S5700 Firmware=v200r006c00
Huawei S5700 Firmware=v200r007c00
Huawei S5700 Firmware=v200r008c00
Huawei S5700 Firmware=v200r010c00
Huawei S5700 Firmware=v200r011c10
Huawei S5700 Firmware=v200r012c00
Huawei S5700 Firmware=v200r013c00
Huawei S5700
Huawei S600-e Firmware=v200r008c00
Huawei S600-e Firmware=v200r010c00
Huawei S600-e Firmware=v200r011c10
Huawei S600-e Firmware=v200r012c00
Huawei S600-e Firmware=v200r013c00
Huawei S600-E
Huawei S6300 Firmware=v200r003c00
Huawei S6300 Firmware=v200r005c00
Huawei S6300 Firmware=v200r007c00
Huawei S6300 Firmware=v200r008c00
Huawei S6300 Firmware=v200r010c00
Huawei S6300 Firmware=v200r011c10
Huawei S6300 Firmware=v200r012c00
Huawei S6300 Firmware=v200r013c00
Huawei S6300
Huawei S6700 Firmware=v200r003c00
Huawei S6700 Firmware=v200r005c00
Huawei S6700 Firmware=v200r007c00
Huawei S6700 Firmware=v200r008c00
Huawei S6700 Firmware=v200r010c00
Huawei S6700 Firmware=v200r011c10
Huawei S6700 Firmware=v200r012c00
Huawei S6700 Firmware=v200r013c00
Huawei S6700
Huawei S7700 Firmware=v200r003c00
Huawei S7700 Firmware=v200r005c00
Huawei S7700 Firmware=v200r006c00
Huawei S7700 Firmware=v200r007c00
Huawei S7700 Firmware=v200r008c00
Huawei S7700 Firmware=v200r010c00
Huawei S7700 Firmware=v200r011c10
Huawei S7700 Firmware=v200r012c00
Huawei S7700 Firmware=v200r013c00
Huawei S7700
Huawei S7900 Firmware=v200r011c10
Huawei S7900 Firmware=v200r012c00
Huawei S7900 Firmware=v200r013c00
Huawei S7900
Huawei S9300 Firmware=v200r003c00
Huawei S9300 Firmware=v200r008c00
Huawei S9300 Firmware=v200r008c10
Huawei S9300 Firmware=v200r010c00
Huawei S9300 Firmware=v200r011c10
Huawei S9300 Firmware=v200r012c00
Huawei S9300 Firmware=v200r013c00
Huawei S9300
Huawei S9300x Firmware=v200r010c00
Huawei S9300x Firmware=v200r011c10
Huawei S9300x Firmware=v200r012c00
Huawei S9300x Firmware=v200r013c00
Huawei S9300x
Huawei S9700 Firmware=v200r003c00
Huawei S9700 Firmware=v200r005c00
Huawei S9700 Firmware=v200r006c00
Huawei S9700 Firmware=v200r007c00
Huawei S9700 Firmware=v200r008c00
Huawei S9700 Firmware=v200r010c00
Huawei S9700 Firmware=v200r011c10
Huawei S9700 Firmware=v200r012c00
Huawei S9700 Firmware=v200r013c00
Huawei S9700
Event History
Jun 4, 2019
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5285?
CVE-2019-5285 has a high severity level due to the potential for remote denial of service attacks.
2
How do I fix CVE-2019-5285?
To fix CVE-2019-5285, update the affected Huawei S series switch firmware to the latest available version as recommended by Huawei.
3
Which devices are affected by CVE-2019-5285?
CVE-2019-5285 affects multiple Huawei S series switches, including specific firmware versions of the S12700, S1700, S2300, S2700, and S5300.
4
What type of attack can exploit CVE-2019-5285?
CVE-2019-5285 is vulnerable to a remote denial of service (DoS) attack that can cause the affected device to reboot.
5
Is authentication required to exploit CVE-2019-5285?
No, CVE-2019-5285 can be exploited by unauthenticated remote attackers.