« Volver al listado

CVE-2019-5277

Estado: ModificadaAlta (7.5)—

Huawei CloudUSM-EUA versiones V600R006C10; V600R019C00, tienen una vulnerabilidad de filtrado de información. Debido a una configuración inapropiada, el atacante puede causar el filtrado de información mediante una explotación con éxito.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Cloudusm-eua Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-5277",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "CloudUSM-EUA",
          "versions": [
            {
              "status": "affected",
              "version": "V600R006C10"
            },
            {
              "status": "affected",
              "version": "V600R019C00"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-12-13T23:15:12.143",
  "references": [
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-eua-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-eua-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Huawei CloudUSM-EUA V600R006C10;V600R019C00 have an information leak vulnerability. Due to improper configuration, the attacker may cause information leak by successful exploitation."
    },
    {
      "lang": "es",
      "value": "Huawei CloudUSM-EUA versiones V600R006C10; V600R019C00, tienen  una vulnerabilidad de filtrado de información. Debido a una configuración inapropiada, el atacante puede causar el filtrado de información mediante una explotación con éxito."
    }
  ],
  "lastModified": "2026-06-17T02:37:25.487",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:cloudusm-eua_firmware:v600r006c10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF27CCE2-1441-4AC5-929B-3B8D8562DF8C"
            },
            {
              "criteria": "cpe:2.3:o:huawei:cloudusm-eua_firmware:v600r019c00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDF79624-DFBB-4EC1-86A1-C2ED56F11261"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:cloudusm-eua:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DCAAA711-C032-4A8A-96D2-C5E100A9CF9E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}