CVE-2019-19415

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20CWE-119

Affected software

VendorProductVersions
HuaweiAR120-SV200R006C10; V200R007C00; V200R008C20 V200R008C30
HuaweiAR1200V200R006C10; V200R007C00; V200R008C20 V200R008C30
HuaweiAR1200-SV200R006C10; V200R007C00; V200R008C20; V200R008C30
HuaweiAR150V200R006C10; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30
HuaweiAR150-SV200R006C10SPC300; V200R007C00; V200R008C20; V200R008C30
HuaweiAR160V200R006C10; V200R006C12; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30
HuaweiAR200V200R006C10; V200R007C00; V200R007C01; V200R008C20; V200R008C30
HuaweiAR200-SV200R006C10; V200R007C00; V200R008C20; V200R008C30
HuaweiAR2200V200R006C10; V200R006C13; V200R006C16PWE; V200R007C00; V200R007C01; V200R007C02; V200R008C20; V200R008C30
HuaweiAR2200-SV200R006C10; V200R007C00; V200R008C20; V200R008C30
HuaweiAR3200V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30
HuaweiAR3600V200R006C10; V200R007C00; V200R007C01; V200R008C20
HuaweiAR510V200R006C10; V200R006C12; V200R006C13; V200R006C15; V200R006C16; V200R006C17; V200R007C00SPC180T; V200R007C00SPC600; V200R007C00SPC900; V200R007C00SPCb00; V200R008C20; V200R008C30
HuaweiDP300V500R002C00
HuaweiIPS ModuleV100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiNGFW ModuleV100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R002C00; V500R002C10
HuaweiNIP6300V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiNIP6600V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiNIP6800V500R001C30; V500R001C50
HuaweiNetEngine16EXV200R006C10; V200R007C00; V200R008C20; V200R008C30
HuaweiRSE6500V500R002C00
HuaweiSMC2.0V100R003C00SPC200T; V100R003C00SPC300T; V100R003C00SPC301T; V100R003C10; V100R005C00SPC100; V100R005C00SPC101B001T; V100R005C00SPC102; V100R005C00SPC103; V100R005C00SPC200; V100R005C00SPC201T; V500R002C00; V600R006C00
HuaweiSRG1300V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30
HuaweiSRG2300V200R006C10; V200R007C00; V200R007C02; V200R008C20; V200R008C30
HuaweiSRG3300V200R006C10; V200R007C00; V200R008C20; V200R008C30
HuaweiSVN5600V200R003C00; V200R003C10
HuaweiSVN5800V200R003C00; V200R003C10
HuaweiSVN5800-CV200R003C00; V200R003C10
HuaweiSeMG9811V300R001C01SPC500; V300R001C01SPC500T; V300R001C01SPC700; V300R001C01SPCa00
HuaweiSecospace USG6300V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiSecospace USG6500V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiSecospace USG6600V100R001C00; V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiSoftCoV200R001C01SPC300; V200R001C01SPC400; V200R001C01SPC500; V200R001C01SPC600; V200R001C01SPH703; V200R003C00SPC100; V200R003C00SPC200; V200R003C00SPC300; V200R003C00SPC500; V200R003C20
HuaweiTE30V100R001C02SPC100; V100R001C02SPC200 V100R001C10; V500R002C00SPC200; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00
HuaweiTE40V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC900; V500R002C00SPCb00; V600R006C00
HuaweiTE50V500R002C00SPC600; V500R002C00SPCb00; V600R006C00
HuaweiTE60V100R001C01SPC100; V100R001C10; V100R001C10SPC300; V100R001C10SPC400; V100R001C10SPC500; V100R001C10SPC600; V100R001C10SPC800; V100R003C00; V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC600; V500R002C00SPC700; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; V500R002C00SPCb00; V600R006C00; V600R006C00SPC200
HuaweiTP3206V100R002C00
HuaweiUSG9500V300R001C01; V300R001C20; V500R001C00; V500R001C20; V500R001C30; V500R001C50
HuaweiUSG9520V300R001C01SPC800PWE
HuaweiUSG9560V300R001C20SPC300
HuaweiVP9660V200R001C02SPC100; V200R001C02SPC200; V200R001C02SPC300; V200R001C02SPC300T; V200R001C02SPC400; V200R001C30SPC100; V200R001C30SPC100B015T; V200R001C30SPC101; V200R001C30SPC101TB015; V200R001C30SPC102T; V200R001C30SPC103T; V200R001C30SPC104T; V200R001C30SPC200; V200R001C30SPC200B022T; V200R001C30SPC201B023T; V200R001C30SPC202B025T; V200R001C30SPC203T; V200R001C30SPC206T; V200R001C30SPC207T; V200R001C30SPC208T
HuaweiViewPoint 8660V100R008C03B013SP02; V100R008C03B013SP03; V100R008C03B013SP04; V100R008C03SPC100; V100R008C03SPC200; V100R008C03SPC300; V100R008C03SPC400; V100R008C03SPC500; V100R008C03SPC600; V100R008C03SPC700; V100R008C03SPC800; V100R008C03SPC900; V100R008C03SPCa00; V100R008C03SPCb00; V100R008C03SPCc00
HuaweiViewPoint 9030V100R011C02SPC100; V100R011C03B012SP15; V100R011C03B012SP16; V100R011C03B015SP03; V100R011C03LGWL01SPC100; V100R011C03LGWL01SPC100B012; V100R011C03SPC100; V100R011C03SPC200; V100R011C03SPC300; V100R011C03SPC400; V100R011C03SPC500
HuaweieSpace U1910V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC500; V100R001C20SPC600; V100R001C20SPH703; V200R003C00; V200R003C20; V200R003C30
HuaweieSpace U1911V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC500; V100R001C20SPC600; V100R001C20SPH309; V100R001C20SPH703; V200R003C00; V200R003C20; V200R003C30
HuaweieSpace U1930V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC500; V100R001C20SPC600; V100R001C20SPH703; V200R003C00; V200R003C20; V200R003C30
HuaweieSpace U1960V100R001C01SPC500; V100R001C20LCRW01T; V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC600; V100R001C20SPC600T; V100R001C20SPH309; V100R001C20SPH703; V200R003C00; V200R003C20; V200R003C30
HuaweieSpace U1980V100R001C01SPC500T; V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC500T; V100R001C20SPC502; V100R001C20SPC600; V100R001C20SPH309; V100R001C20SPH703; V200R003C00; V200R003C20; V200R003C30
HuaweieSpace U1981V100R001C20SPC300; V100R001C20SPC400; V100R001C20SPC500; V100R001C20SPC600; V100R001C20SPC700; V100R001C20SPH702; V100R001C20SPH703; V100R001C30; V200R003C00; V200R003C20; V200R003C30

References

Timeline

Published
Jul 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-194167.5The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabiliCVE-2019-194177.5The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabiliCVE-2019-19426.5A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker tCVE-2019-19436.1A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remoCVE-2019-19447.3Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local atCVE-2019-194416.5HUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information leak vulnerability. An attacker could send spCVE-2019-194477.8In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-freCVE-2019-194487.8In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs systeCVE-2019-194497.8In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manageCVE-2019-19457.8Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local atCVE-2019-194509.8paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in CVE-2019-194515.5When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an en
CVE-2019-19415: High severity, CVSS 7.5 | Vulnix