CVE-2019-5300

Published: Jun 4, 2019Modified: Nov 21, 2024

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Affected (52)

Products: Huawei: Ar1200 Firmware, Ar1200 S Firmware, Ar150 Firmware, Ar160 Firmware, Ar200 Firmware, Ar2200 Firmware, Ar2200s Firmware, Ar3200 Firmware, Srg1300 Firmware, Srg2300 Firmware, Srg3300 Firmware

11 products

Configuration A

5 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Huawei Ar1200 Firmware	Version v200r007c00
Huawei Ar1200 Firmware	Version v200r008c20
Huawei Ar1200 Firmware	Version v200r008c50
Huawei Ar1200 Firmware	Version v200r009c00
Huawei Ar1200 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar1200e	All versions
Huawei Ar1220c	All versions
Huawei Ar1220ev	All versions
Huawei Ar1220evw	All versions

Configuration B

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar1200 S Firmware	Version v200r007c00
Huawei Ar1200 S Firmware	Version v200r008c20
Huawei Ar1200 S Firmware	Version v200r008c50
Huawei Ar1200 S Firmware	Version v200r009c00
Huawei Ar1200 S Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar1220f S	All versions

Configuration C

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar150 Firmware	Version v200r007c00
Huawei Ar150 Firmware	Version v200r008c20
Huawei Ar150 Firmware	Version v200r008c50
Huawei Ar150 Firmware	Version v200r009c00
Huawei Ar150 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar158evw	All versions

Configuration D

5 vulnerable · 22 platform

Vulnerable Software	Affected Versions
Huawei Ar160 Firmware	Version v200r007c00
Huawei Ar160 Firmware	Version v200r008c20
Huawei Ar160 Firmware	Version v200r008c50
Huawei Ar160 Firmware	Version v200r009c00
Huawei Ar160 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar161	All versions
Huawei Ar161ew	All versions
Huawei Ar161f	All versions
Huawei Ar161f Dgp	All versions
Huawei Ar161fg L	All versions
Huawei Ar161fgw L	All versions
Huawei Ar161fv 1p	All versions
Huawei Ar161fw	All versions
Huawei Ar161g L	All versions
Huawei Ar161w	All versions
Huawei Ar168f	All versions
Huawei Ar168f 4p	All versions
Huawei Ar169	All versions
Huawei Ar169egw L	All versions
Huawei Ar169ew	All versions
Huawei Ar169f	All versions
Huawei Ar169fgw L	All versions
Huawei Ar169fvw	All versions
Huawei Ar169fvw 8s	All versions
Huawei Ar169g L	All versions
Huawei Ar169jfvw 2s	All versions
Huawei Ar169w	All versions

Configuration E

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar200 Firmware	Version v200r007c00
Huawei Ar200 Firmware	Version v200r008c20
Huawei Ar200 Firmware	Version v200r008c50
Huawei Ar200 Firmware	Version v200r009c00
Huawei Ar200 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar201	All versions

Configuration F

5 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Huawei Ar2200 Firmware	Version v200r007c00
Huawei Ar2200 Firmware	Version v200r008c20
Huawei Ar2200 Firmware	Version v200r008c50
Huawei Ar2200 Firmware	Version v200r009c00
Huawei Ar2200 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar2204 27ge	All versions
Huawei Ar2204 27ge P	All versions
Huawei Ar2204 51ge P	All versions
Huawei Ar2204e	All versions
Huawei Ar2204xe	All versions
Huawei Ar2220e	All versions
Huawei Ar2240	All versions
Huawei Ar2240c	All versions

Configuration G

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar2200s Firmware	Version v200r007c00
Huawei Ar2200s Firmware	Version v200r008c20
Huawei Ar2200s Firmware	Version v200r008c50
Huawei Ar2200s Firmware	Version v200r009c00
Huawei Ar2200s Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar2200s	All versions

Configuration H

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ar3200 Firmware	Version v200r007c00
Huawei Ar3200 Firmware	Version v200r008c20
Huawei Ar3200 Firmware	Version v200r008c50
Huawei Ar3200 Firmware	Version v200r009c00
Huawei Ar3200 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Ar3260	All versions

Configuration I

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Srg1300 Firmware	Version v200r007c00
Huawei Srg1300 Firmware	Version v200r008c50
Huawei Srg1300 Firmware	Version v200r009c00
Huawei Srg1300 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Srg1320vw	All versions

Configuration J

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Srg2300 Firmware	Version v200r007c00
Huawei Srg2300 Firmware	Version v200r008c50
Huawei Srg2300 Firmware	Version v200r009c00
Huawei Srg2300 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Srg2320e	All versions

Configuration K

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Srg3300 Firmware	Version v200r007c00
Huawei Srg3300 Firmware	Version v200r008c50
Huawei Srg3300 Firmware	Version v200r009c00
Huawei Srg3300 Firmware	Version v200r010c00

Running on/with	Platform Versions
Huawei Srg3340	All versions

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.