CVE-2019-19417
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
- Record
CVE-2019-19417- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20, CWE-119
- Updated
- 2026-11-02
CVE List No score
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
- Record
CVE-2019-19417- Updated
- 2026-11-02
EUVDEUVD-2019-9038 No score
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
- Record
EUVD-2019-9038- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9x5v-rw99-vj9p No score
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote...
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
- Record
GHSA-9x5v-rw99-vj9p- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- huawei ar120-s
- huawei ar120-s firmware
- huawei ar1200
- huawei ar1200-s
- huawei ar1200-s firmware
- huawei ar1200 firmware
- huawei ar150
- huawei ar150-s
- huawei ar150-s firmware
- huawei ar150 firmware
- huawei ar160
- huawei ar160 firmware
Show 88 moreShow less
- huawei ar200
- huawei ar200-s
- huawei ar200-s firmware
- huawei ar200 firmware
- huawei ar2200
- huawei ar2200-s
- huawei ar2200-s firmware
- huawei ar2200 firmware
- huawei ar3200
- huawei ar3200 firmware
- huawei ar3600
- huawei ar3600 firmware
- huawei ar510
- huawei ar510 firmware
- huawei dp300
- huawei dp300 firmware
- huawei espace u1910
- huawei espace u1911
- huawei espace u1930
- huawei espace u1960
- huawei espace u1980
- huawei espace u1981
- huawei espace u1910 firmware
- huawei espace u1911 firmware
- huawei espace u1930 firmware
- huawei espace u1960 firmware
- huawei espace u1980 firmware
- huawei espace u1981 firmware
- huawei ips module
- huawei ips module firmware
- huawei netengine16ex
- huawei netengine16ex firmware
- huawei ngfw module
- huawei ngfw module firmware
- huawei nip6300
- huawei nip6300 firmware
- huawei nip6600
- huawei nip6600 firmware
- huawei nip6800
- huawei nip6800 firmware
- huawei rse6500
- huawei rse6500 firmware
- huawei secospace usg6300
- huawei secospace usg6500
- huawei secospace usg6600
- huawei secospace usg6300 firmware
- huawei secospace usg6500 firmware
- huawei secospace usg6600 firmware
- huawei semg9811
- huawei semg9811 firmware
- huawei smc2.0
- huawei smc2.0 firmware
- huawei softco
- huawei softco firmware
- huawei srg1300
- huawei srg1300 firmware
- huawei srg2300
- huawei srg2300 firmware
- huawei srg3300
- huawei srg3300 firmware
- huawei svn5600
- huawei svn5600 firmware
- huawei svn5800
- huawei svn5800-c
- huawei svn5800-c firmware
- huawei svn5800 firmware
- huawei te30
- huawei te30 firmware
- huawei te40
- huawei te40 firmware
- huawei te50
- huawei te50 firmware
- huawei te60
- huawei te60 firmware
- huawei tp3206
- huawei tp3206 firmware
- huawei usg9500
- huawei usg9500 firmware
- huawei usg9520
- huawei usg9520 firmware
- huawei usg9560
- huawei usg9560 firmware
- huawei viewpoint 8660
- huawei viewpoint 9030
- huawei viewpoint 8660 firmware
- huawei viewpoint 9030 firmware
- huawei vp9660
- huawei vp9660 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-19417 is a high vulnerability (CVSS 7.5) in Huawei Ar120-s, published July 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. No source names a fixed version.