CveMateVulnerability intelligence

Huawei Ar1200 vulnerabilities, page 3

45 vulnerabilities

Known vulnerabilities in Huawei Ar1200, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2019-5293huaweiar120-s_firmware+156y ago13-11-2019 16:19

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.CVE-2019-5300huaweiar1200_firmware+117y ago04-06-2019 18:30

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.CVE-2019-5259huaweiar120-s_firmware+116y ago16-12-2019 21:43

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.CVE-2019-5294huaweiar120-s_firmware+156y ago13-11-2019 16:12

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal.CVE-2019-5304huaweiar120-s_firmware+256y ago03-01-2020 14:33

Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.