« Volver al listado

CVE-2019-5232

Estado: ModificadaAlta (7.5)—

There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Huawei — Vp9630 FirmwareHuawei — Vp9650 FirmwareHuawei — Vp9660 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-5232",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "VP9630, VP9650, VP9660",
          "versions": [
            {
              "status": "affected",
              "version": "V500R002C00, V500R002C10"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-11-29T20:15:11.940",
  "references": [
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-viewpoint-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-viewpoint-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-330"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de uso de valores aleatorios de manera insuficiente en los productos Huawei ViewPoint. Un atacante remoto no autenticado puede adivinar información mediante un gran número de intentos. Una explotación con éxito puede causar un filtrado de información."
    }
  ],
  "lastModified": "2026-06-17T02:37:20.733",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:vp9630_firmware:v500r002c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECEBAFE1-9E38-4424-A505-100A395BB9F7"
            },
            {
              "criteria": "cpe:2.3:o:huawei:vp9630_firmware:v500r002c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A4B6904-E2A0-41B9-8AF8-B298FB6F83FF"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:vp9630:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "47FDD1F2-BAA8-4133-A05D-C84063C1F270"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:vp9650_firmware:v500r002c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F23CEDE-F5AC-49DA-92BC-1F696810AA22"
            },
            {
              "criteria": "cpe:2.3:o:huawei:vp9650_firmware:v500r002c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA56D2AB-D108-49B7-B1AE-A9EF1F88CF28"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:vp9650:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "23DBFBB5-2716-4816-ABA8-78B6C2D76668"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:vp9660_firmware:v500r002c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A68709FF-9E1C-4174-A925-70A88D4376A3"
            },
            {
              "criteria": "cpe:2.3:o:huawei:vp9660_firmware:v500r002c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A58ED692-8BED-4877-9BC9-D41386B660C1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:vp9660:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D1DC498B-F19F-403A-ACFE-F8364A78EC66"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}