CVE-2019-5304
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could...
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
- Record
CVE-2019-5304- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
- Record
CVE-2019-5304- Updated
- 2026-11-02
EUVDEUVD-2019-14909 No score
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
- Record
EUVD-2019-14909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g2v6-85vj-6rw8 No score
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could...
Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation of some parameters in the messages, successful exploit may cause the device to reset.
- Record
GHSA-g2v6-85vj-6rw8- Updated
- 2026-11-02
Affected products
- huawei ar120-s firmware
- huawei ar1200-s firmware
- huawei ar1200 firmware
- huawei ar150-s firmware
- huawei ar150 firmware
- huawei ar160 firmware
- huawei ar200-s firmware
- huawei ar200 firmware
- huawei ar2200-s firmware
- huawei ar2200 firmware
- huawei ar3200 firmware
- huawei ar3600 firmware
Show 14 moreShow less
- huawei ips module firmware
- huawei netengine16ex firmware
- huawei ngfw module firmware
- huawei nip6300 firmware
- huawei nip6600 firmware
- huawei s5700 firmware
- huawei s6700 firmware
- huawei secospace antiddos8000 firmware
- huawei secospace usg6300 firmware
- huawei secospace usg6500 firmware
- huawei secospace usg6600 firmware
- huawei srg1300 firmware
- huawei srg2300 firmware
- huawei srg3300 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5304 is a high vulnerability (CVSS 7.5) in Huawei Ar120-s Firmware, published January 3, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. No source names a fixed version.