CVE-2019-5248

Published: Dic 13, 2019 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2019-14853 Aliases: GSD-2019-5248
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,4
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 6,1
Source: [email protected]
Access Vector: adjacent_network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: complete

Description

AI Translation Available

CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs after the device uses the specific packet. As a result, the attacker can exploit this vulnerability to cause DoS attacks on the target device.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0012
Percentile
0,3th
Updated

EPSS Score Trend (Last 91 Days)

401

Missing Release of Memory after Effective Lifetime

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Instability Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Reduce Performance
Applicable Platforms
Languages: C, C++, Not Language-Specific
Likelihood of Exploit: Medium
View CWE Details
Operating System

Cloudengine 12800 Firmware by Huawei

Product Information
Vendor Huawei
Product Cloudengine 12800 Firmware
Version v200r001c00spc600
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00spc600:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cloudengine 12800 Firmware by Huawei

Product Information
Vendor Huawei
Product Cloudengine 12800 Firmware
Version v200r002c50spc800pwe
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800pwe:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cloudengine 12800 Firmware by Huawei

Product Information
Vendor Huawei
Product Cloudengine 12800 Firmware
Version v200r002c01
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c01:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cloudengine 12800 Firmware by Huawei

Product Information
Vendor Huawei
Product Cloudengine 12800 Firmware
Version v200r001c00spc700
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r001c00spc700:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Cloudengine 12800 Firmware by Huawei

Product Information
Vendor Huawei
Product Cloudengine 12800 Firmware
Version v200r002c50spc800
cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://www.huawei.com/en/psirt/security-advisories/huawei-s…
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en
http://www.huawei.com/en/psirt/security-advisories/huawei-s…
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-dos-en