CVE-2019-5232 Information disclosure in VP9630, VP9650, VP9660
An unauthenticated remote attacker can guess information through brute-force attempts, leading to information leakage in Huawei ViewPoint products.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5232?
CVE-2019-5232 is a high-severity vulnerability in VP9630, VP9650, VP9660, published on 29 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak.
Weakness: CWE-330
Which versions are affected by CVE-2019-5232?
It affects 3 products.
Products include Huawei Vp9630 Firmware, Huawei Vp9650 Firmware, Huawei Vp9660 Firmware.
How do I fix CVE-2019-5232?
No fix has been published for CVE-2019-5232 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5232 being exploited?
There is no known exploitation of CVE-2019-5232 in the wild and no public exploit code.
Sources
Also known as GHSA-7g6p-9397-6cfc.