CVE-2019-5293
Estado: ModificadaMedia (6.5)—
Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.87%
- Percentil entre todas las CVEs puntuadas: 57
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (16)
Huawei — Ar120-s FirmwareHuawei — Ar1200-s FirmwareHuawei — Ar1200 FirmwareHuawei — Ar150-s FirmwareHuawei — Ar150 FirmwareHuawei — Ar160 FirmwareHuawei — Ar200-s FirmwareHuawei — Ar200 FirmwareHuawei — Ar2200-s FirmwareHuawei — Ar2200 FirmwareHuawei — Ar3200 FirmwareHuawei — Ar3600 FirmwareHuawei — Netengine16ex FirmwareHuawei — Srg1300 FirmwareHuawei — Srg2300 FirmwareHuawei — Srg3300 Firmware
CWE
- CWE-401
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-5293",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@huawei.com",
"affectedData": [
{
"vendor": "n/a",
"product": "AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, NetEngine16EX, SRG1300, SRG2300, SRG3300",
"versions": [
{
"status": "affected",
"version": "AR120-S V200R005C20, V200R006C10, AR1200 V200R005C20, V200R006C10, AR1200-S V200R005C20, V200R006C10, AR150 V200R005C20, V200R006C10, AR150-S V200R005C20, V200R006C10, AR160 V200R005C20, V200R006C10, AR200 V200R005C20, V200R006C10, AR200-S V200R005C20, V200R006C10, AR2200 V200R005C20, V200R006C10, AR2200-S V200R005C20, V200R006C10, AR3200 V200R005C20, V200R006C10, AR3600 V200R006C10, NetEngine16EX V200R005C20, V200R006C10, SRG1300 V200R005C20, V200R006C10, SRG2300 V200R005C20, V200R006C10, SRG3300 V200R005C20, V200R006C10"
}
]
}
]
}
],
"published": "2019-11-13T17:15:14.070",
"references": [
{
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en",
"tags": [
"Vendor Advisory"
],
"source": "psirt@huawei.com"
},
{
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191023-01-memory-en",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-401"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal."
},
{
"lang": "es",
"value": "Algunos productos de Huawei tienen una vulnerabilidad de pérdida de memoria cuando manejan algunos mensajes. Un atacante remoto con privilegio de operación podría explotar la vulnerabilidad mediante el envío continuo de mensajes específicos. Una explotación con éxito puede causar que algún servicio sea anormal."
}
],
"lastModified": "2026-06-17T02:37:27.347",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62C6C92D-7F31-49FB-BE40-035811FD69AB"
},
{
"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F8934C1-9162-4C52-A0FC-6B2914E93304"
},
{
"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFE416CD-53B5-4E08-BB30-682887740C3D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BC1D978-9DA1-4165-A66C-2D274B188C88"
},
{
"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B053C248-3CC2-476D-95A7-90EDD8EAAD69"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDFC3878-5A1D-4846-B4F9-3D1FC1DBCF5A"
},
{
"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "526371A8-11FE-4D00-AFBB-8E867A320B27"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4403DAD1-90B3-44EC-8A34-64D6E321170B"
},
{
"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72BC8C3E-420F-49D1-9E58-98E4E23A024F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "372E2136-95CE-4833-B4AF-306F0807BA79"
},
{
"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85A72083-717F-4C71-A2D7-62E1C64FEE94"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "137A007D-A498-483F-8B4F-DCA118B25F11"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "629DF7DD-4900-41CB-B257-7DE20A9B9DFB"
},
{
"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17586781-04AB-4285-BCA2-5DB13B8D94E3"
},
{
"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36DE9947-C096-4B7F-8F3E-748DEFC677C3"
},
{
"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F042B27-F875-4BA3-9002-E5ADC544208B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "50662078-4827-4706-AE29-170E2239C5AE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8A20ED1-7138-4FD0-BA2B-637D41739603"
},
{
"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32119825-AF22-44AA-8D04-1FAACF9E2E89"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C10C07E-5194-4EAB-9AC8-DB87CE52F5FA"
},
{
"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26CFB676-658E-4DEF-8C29-13CA633D7270"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:netengine16ex_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A321DABC-2B17-4B32-AF63-944476C0E68D"
},
{
"criteria": "cpe:2.3:o:huawei:netengine16ex_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE7A0E2C-8383-443D-8625-77CBC53D2140"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:netengine16ex:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E6224ECC-6949-4204-94D1-C7374C142A50"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:srg1300_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98DCADD0-8E0D-4241-AB94-32233C46790E"
},
{
"criteria": "cpe:2.3:o:huawei:srg1300_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DF1DFD2-5337-45CA-A1A9-2E6622536027"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:srg1300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CF77FB70-AAF3-421E-8D9B-F0C54E6A2FC0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:srg2300_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C897138-887E-4CD9-B4D2-A8D5DAA851DD"
},
{
"criteria": "cpe:2.3:o:huawei:srg2300_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D485D5E3-3819-4F3A-B841-ACB6253ACF2F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:srg2300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BAF601C-B8EC-42F5-95F4-274F8492F57E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:srg3300_firmware:v200r005c20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "202E709E-CC7D-44AF-A63F-30A6A738F5EA"
},
{
"criteria": "cpe:2.3:o:huawei:srg3300_firmware:v200r006c10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "309B9B0E-3639-4913-9DE4-9D4DAE6B0065"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:srg3300:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "43681AE7-5C12-4772-85A9-0A10177C6CFD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@huawei.com"
}