← Back

CVE-2019-5232

nvd nist
Published: Nov 29, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploitation may cause information leak.

Affected (6)

Huawei
3 products
Vp9630 Firmware
Vp9650 Firmware
Vp9660 Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Vp9630 Firmware
Version v500r002c00
Vp9630 Firmware
Version v500r002c10
Running on/withPlatform Versions
Huawei
Vp9630
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Vp9650 Firmware
Version v500r002c00
Vp9650 Firmware
Version v500r002c10
Running on/withPlatform Versions
Huawei
Vp9650
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Vp9660 Firmware
Version v500r002c00
Vp9660 Firmware
Version v500r002c10
Running on/withPlatform Versions
Huawei
Vp9660
All versions

Related CWEs

CWE-330
Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.