cve-2019-19397
Vulnerability from cvelistv5
Published
2019-12-13 14:19
Modified
2024-08-05 02:16
Severity ?
EPSS score ?
Summary
There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | n/a | S12700;S1700;S2700;S5700;S6700;S7700;S9700 |
Version: V200R007C00 Version: V200R007C01 Version: V200R007C20 Version: V200R008C00 Version: V200R010C00 Version: V200R011C10 Version: V200R012C00 Version: V200R006C10 Version: V200R012C20 Version: V200R006C00 Version: V200R011C00 Version: V200R005C00 Version: V200R005C02 Version: V200R005C03 Version: V200R005C01 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T02:16:47.108Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "S12700;S1700;S2700;S5700;S6700;S7700;S9700", "vendor": "n/a", "versions": [ { "status": "affected", "version": "V200R007C00" }, { "status": "affected", "version": "V200R007C01" }, { "status": "affected", "version": "V200R007C20" }, { "status": "affected", "version": "V200R008C00" }, { "status": "affected", "version": "V200R010C00" }, { "status": "affected", "version": "V200R011C10" }, { "status": "affected", "version": "V200R012C00" }, { "status": "affected", "version": "V200R006C10" }, { "status": "affected", "version": "V200R012C20" }, { "status": "affected", "version": "V200R006C00" }, { "status": "affected", "version": "V200R011C00" }, { "status": "affected", "version": "V200R005C00" }, { "status": "affected", "version": "V200R005C02" }, { "status": "affected", "version": "V200R005C03" }, { "status": "affected", "version": "V200R005C01" } ] } ], "descriptions": [ { "lang": "en", "value": "There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks." } ], "problemTypes": [ { "descriptions": [ { "description": "Weak Algorithm", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-12-13T14:19:12", "orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@huawei.com", "ID": "CVE-2019-19397", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "S12700;S1700;S2700;S5700;S6700;S7700;S9700", "version": { "version_data": [ { "version_value": "V200R007C00" }, { "version_value": "V200R007C01" }, { "version_value": "V200R007C20" }, { "version_value": "V200R008C00" }, { "version_value": "V200R010C00" }, { "version_value": "V200R011C10" }, { "version_value": "V200R012C00" }, { "version_value": "V200R006C10" }, { "version_value": "V200R012C20" }, { "version_value": "V200R006C00" }, { "version_value": "V200R011C00" }, { "version_value": "V200R005C00" }, { "version_value": "V200R005C02" }, { "version_value": "V200R005C03" }, { "version_value": "V200R005C01" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Weak Algorithm" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en", "refsource": "MISC", "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en" } ] } } } }, "cveMetadata": { "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "assignerShortName": "huawei", "cveId": "CVE-2019-19397", "datePublished": "2019-12-13T14:19:12", "dateReserved": "2019-11-29T00:00:00", "dateUpdated": "2024-08-05T02:16:47.108Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "fkie_nvd": { "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"10CBC93B-5CF6-45BF-A90A-84B7693E27FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AC4803A7-44B2-41BA-814D-151239B92CEF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r007c20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"985C07E4-1E27-4191-9FB8-4714A177479D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"933755CC-4A0B-42FB-9491-3C841059851D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D6FF612-2F2B-4B75-8D97-86205DFCF0CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s12700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CDC385D3-E82B-454B-A131-971F3B830EC9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"138C1E57-176C-46B1-9704-D9C8391CC802\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"410E8DAA-E961-46E1-96E2-3AC4B40D8359\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"099E36B0-125F-4B3F-8D4A-01F8882CF53B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s1700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"342E032C-BAE5-4F15-8BAE-84F9D9AA58D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s1700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC439F55-11AB-42D2-B891-C6C5D62FF5F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s1700_firmware:v200r012c20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF8C93E3-C155-47D2-A927-D4D4F17BA494\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r006c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"193FCE7A-C793-446B-9C39-20597FA7BC70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BC1D26AA-09DF-49DA-930F-A2EAEA486361\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E364889D-CDEE-4D8C-82E5-6D5BC3DD768A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB8FC67E-DFD3-482E-B7D6-17464885B8DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5561195B-7385-4175-9D29-77E95E4E9AB6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r011c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9461516A-F5BB-4A52-A315-8C2B559528A0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"20648023-4CC5-4606-BE8E-70A5C20D7BE6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s2700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1449504A-662C-403C-85AF-CCB5219CE976\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD2CD071-58E4-4061-8217-990453213470\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCF23DAE-1215-41B2-88C5-4436D846266C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r005c02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB33B908-085C-43C6-B8B7-25BBF3614C9E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B18ABC1-A970-472A-A8BF-934D1180930E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5973A534-F961-4A97-B20E-994BA28AFE29\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"40745A01-E5AC-4207-A34F-D8E7F7231F83\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA744621-893C-4F7E-80A1-66559BC6D6F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r011c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DD2FEF0B-B4AC-4EDB-AD25-41F4F9DA1DAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFD7EF17-710B-4363-87B7-CE1B4447BF99\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"17CDA635-A9E7-4678-8970-22DFC028BAF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s5700_firmware:v200r012c20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B80F5B3-147A-46E3-9306-70052511A6D2\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E22D3CFF-3353-4EE2-8933-84F395469D0D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F18D9776-5CE7-4DD3-9119-7FB08A35B955\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4979AA8-0D8E-4F37-A7DC-709BE4821D51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"898AC16A-8F4E-4709-A3B4-DE74FFB91130\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8DA5CF67-A58B-4666-B87E-712507233453\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91E52545-B12E-43EC-B132-28FA2E511316\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r011c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"11F25342-CE07-44CD-BD61-A998DFC8EF8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C34E6D4-67FE-4AA4-A825-9666A302F771\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s6700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AA68BF50-9118-445D-B778-E60812E67B98\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DA7AC10D-B0DD-4206-8642-134DDD585C06\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2377CD30-6F57-46CB-9DD1-E29458A7D928\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1D79CD09-3414-4105-AD59-F3D1BAC61B7E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"37E3F87E-EA36-41ED-8793-F6C166FFC4A7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"26F2CC30-626B-4FEE-BDAD-6A5990DE6384\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s7700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D43F5AE6-A4CD-4C45-A8A4-D5B064FE7C27\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8769C2C4-E333-432B-8943-CFDFAE013379\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D78DAB13-32AA-4813-AB0A-0EA870F41183\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"38515A04-EC21-40B3-A29C-8D0A5883EA4A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36AB80F7-1BD2-4169-AC70-708CE84BB15C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r011c10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B06663D-8499-42B9-83E1-E369F1FD0070\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:huawei:s9700_firmware:v200r012c00:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1B299A06-5D99-43A8-ACF3-4D79174C536E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"75FAA4BF-1ED0-4059-ADA1-071AF1BF2882\"}]}]}]", "descriptions": "[{\"lang\": \"en\", \"value\": \"There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.\"}, {\"lang\": \"es\", \"value\": \"Se presenta una vulnerabilidad de algoritmo d\\u00e9bil en algunos productos Huawei. Los productos afectados utilizan algoritmos d\\u00e9biles por defecto. Los atacantes pueden explotar la vulnerabilidad para causar filtrados de informaci\\u00f3n.\"}]", "id": "CVE-2019-19397", "lastModified": "2024-11-21T04:34:43.150", "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", "published": "2019-12-13T15:15:11.113", "references": "[{\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en\", \"source\": \"psirt@huawei.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]", "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Modified", "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]" }, "nvd": "{\"cve\":{\"id\":\"CVE-2019-19397\",\"sourceIdentifier\":\"psirt@huawei.com\",\"published\":\"2019-12-13T15:15:11.113\",\"lastModified\":\"2024-11-21T04:34:43.150\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.\"},{\"lang\":\"es\",\"value\":\"Se presenta una vulnerabilidad de algoritmo d\u00e9bil en algunos productos Huawei. Los productos afectados utilizan algoritmos d\u00e9biles por defecto. Los atacantes pueden explotar la vulnerabilidad para causar filtrados de informaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r007c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10CBC93B-5CF6-45BF-A90A-84B7693E27FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC4803A7-44B2-41BA-814D-151239B92CEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r007c20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"985C07E4-1E27-4191-9FB8-4714A177479D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"933755CC-4A0B-42FB-9491-3C841059851D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D6FF612-2F2B-4B75-8D97-86205DFCF0CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s12700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDC385D3-E82B-454B-A131-971F3B830EC9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"138C1E57-176C-46B1-9704-D9C8391CC802\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s1700_firmware:v200r006c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"410E8DAA-E961-46E1-96E2-3AC4B40D8359\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"099E36B0-125F-4B3F-8D4A-01F8882CF53B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s1700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"342E032C-BAE5-4F15-8BAE-84F9D9AA58D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s1700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC439F55-11AB-42D2-B891-C6C5D62FF5F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s1700_firmware:v200r012c20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF8C93E3-C155-47D2-A927-D4D4F17BA494\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r006c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"193FCE7A-C793-446B-9C39-20597FA7BC70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r006c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC1D26AA-09DF-49DA-930F-A2EAEA486361\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r007c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E364889D-CDEE-4D8C-82E5-6D5BC3DD768A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB8FC67E-DFD3-482E-B7D6-17464885B8DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5561195B-7385-4175-9D29-77E95E4E9AB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r011c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9461516A-F5BB-4A52-A315-8C2B559528A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20648023-4CC5-4606-BE8E-70A5C20D7BE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s2700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1449504A-662C-403C-85AF-CCB5219CE976\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD2CD071-58E4-4061-8217-990453213470\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r005c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCF23DAE-1215-41B2-88C5-4436D846266C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r005c02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB33B908-085C-43C6-B8B7-25BBF3614C9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r005c03:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B18ABC1-A970-472A-A8BF-934D1180930E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r006c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5973A534-F961-4A97-B20E-994BA28AFE29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r007c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40745A01-E5AC-4207-A34F-D8E7F7231F83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA744621-893C-4F7E-80A1-66559BC6D6F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r011c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD2FEF0B-B4AC-4EDB-AD25-41F4F9DA1DAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFD7EF17-710B-4363-87B7-CE1B4447BF99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17CDA635-A9E7-4678-8970-22DFC028BAF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s5700_firmware:v200r012c20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B80F5B3-147A-46E3-9306-70052511A6D2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E22D3CFF-3353-4EE2-8933-84F395469D0D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r005c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F18D9776-5CE7-4DD3-9119-7FB08A35B955\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r005c01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4979AA8-0D8E-4F37-A7DC-709BE4821D51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r005c02:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"898AC16A-8F4E-4709-A3B4-DE74FFB91130\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DA5CF67-A58B-4666-B87E-712507233453\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91E52545-B12E-43EC-B132-28FA2E511316\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r011c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11F25342-CE07-44CD-BD61-A998DFC8EF8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C34E6D4-67FE-4AA4-A825-9666A302F771\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s6700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA68BF50-9118-445D-B778-E60812E67B98\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA7AC10D-B0DD-4206-8642-134DDD585C06\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r006c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF3FB3CC-2EAC-4A08-BDDC-DCACEE9FA2AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r007c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2377CD30-6F57-46CB-9DD1-E29458A7D928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D79CD09-3414-4105-AD59-F3D1BAC61B7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37E3F87E-EA36-41ED-8793-F6C166FFC4A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26F2CC30-626B-4FEE-BDAD-6A5990DE6384\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s7700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D43F5AE6-A4CD-4C45-A8A4-D5B064FE7C27\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8769C2C4-E333-432B-8943-CFDFAE013379\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r006c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AC7E622-010C-4C5D-8AA6-D4793AFCE0E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r007c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D78DAB13-32AA-4813-AB0A-0EA870F41183\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38515A04-EC21-40B3-A29C-8D0A5883EA4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36AB80F7-1BD2-4169-AC70-708CE84BB15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r011c10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B06663D-8499-42B9-83E1-E369F1FD0070\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:huawei:s9700_firmware:v200r012c00:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B299A06-5D99-43A8-ACF3-4D79174C536E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75FAA4BF-1ED0-4059-ADA1-071AF1BF2882\"}]}]}],\"references\":[{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en\",\"source\":\"psirt@huawei.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.