CVE-2019-19417 Denial of service in AR120-S
Remote attackers can cause denial of service on Huawei AR routers by sending crafted SIP messages that trigger buffer overflows and dead loops.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19417?
CVE-2019-19417 is a high-severity denial of service vulnerability in Huawei Ar3200 Firmware, published on 8 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Which versions are affected by CVE-2019-19417?
It affects 50 products.
Products include Huawei Ar120-S Firmware, Huawei Ar1200-S Firmware, Huawei Ar1200 Firmware, Huawei Ar150-S Firmware, Huawei Ar150 Firmware, Huawei Ar160 Firmware and 44 more.
How do I fix CVE-2019-19417?
No fix has been published for CVE-2019-19417 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-19417 being exploited?
There is no known exploitation of CVE-2019-19417 in the wild and no public exploit code.
Other vulnerabilities in Huawei Ar3200 Firmware
- CVE-2017-17301 Weak cryptography in AR120-S,AR1200,AR1200-S,AR150,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,DP300,SMC2.0,SRG1300,SRG2300,SRG3300,TE30,TE60,VP9660,ViewPoint 8660,eSpace IAD,eSpace U1981,eSpace USM
- CVE-2019-19415 Denial of service in AR120-S
- CVE-2019-19416 Denial of service in AR120-S
- CVE-2019-5304 Denial of service in AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;IPS Module;NGFW Module;NIP6300;NIP6600;NetEngine16EX;S5700;S6700;SRG1300;SRG2300;SRG3300;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600
- CVE-2019-5294 Memory corruption in AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,NetEngine16EX,SRG1300,SRG2300,SRG3300
Sources
Also known as GHSA-9x5v-rw99-vj9p.