SARA / Free Tools / CVE / CVE-2019-19415

CVE-2019-19415 — The SIP module of some Huawei products have a denial of service (DoS) vulnerabil

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful explo

CVSS
— —
EPSS
0.36% (top 42.30%)
CWE
—
Published
2020-07-08T16:58:31.000Z
Last modified
2024-08-05T02:16:47.092Z
CVSS vector
—

01What is this vulnerability?

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be…

02Affected products

VendorProductVersions
HuaweiAR120S — V200R006C10, V200R007C00, V200R008C20 V200R008C30
HuaweiAR1200V200R006C10, V200R007C00, V200R008C20 V200R008C30
HuaweiAR1200S — V200R006C10, V200R007C00, V200R008C20, V200R008C30
HuaweiAR150V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
HuaweiAR150S — V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30
HuaweiAR160V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
HuaweiAR200V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30
HuaweiAR200S — V200R006C10, V200R007C00, V200R008C20, V200R008C30
HuaweiAR2200V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30
HuaweiAR2200S — V200R006C10, V200R007C00, V200R008C20, V200R008C30
HuaweiAR3200V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30
HuaweiAR3600V200R006C10, V200R007C00, V200R007C01, V200R008C20
HuaweiAR510V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R007C00SPC600, V200R007C00SPC900, V200R007C00SPCb00, V200R008C20, V200R008C30
HuaweiDP300V500R002C00
HuaweiIPS ModuleV100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiNGFW ModuleV100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10
HuaweiNIP6300V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiNIP6600V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiNIP6800V500R001C30, V500R001C50
HuaweiNetEngine16EXV200R006C10, V200R007C00, V200R008C20, V200R008C30
HuaweiRSE6500V500R002C00
HuaweiSMC2.0V100R003C00SPC200T, V100R003C00SPC300T, V100R003C00SPC301T, V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00
HuaweiSRG1300V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30
HuaweiSRG2300V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30
HuaweiSRG3300V200R006C10, V200R007C00, V200R008C20, V200R008C30
HuaweiSVN5600V200R003C00, V200R003C10
HuaweiSVN5800V200R003C00, V200R003C10
HuaweiSVN5800C — V200R003C00, V200R003C10
HuaweiSeMG9811V300R001C01SPC500, V300R001C01SPC500T, V300R001C01SPC700, V300R001C01SPCa00
HuaweiSecospace USG6300V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiSecospace USG6500V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiSecospace USG6600V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiSoftCoV200R001C01SPC300, V200R001C01SPC400, V200R001C01SPC500, V200R001C01SPC600, V200R001C01SPH703, V200R003C00SPC100, V200R003C00SPC200, V200R003C00SPC300, V200R003C00SPC500, V200R003C20
HuaweiTE30V100R001C02SPC100, V100R001C02SPC200 V100R001C10, V500R002C00SPC200, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00
HuaweiTE40V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00
HuaweiTE50V500R002C00SPC600, V500R002C00SPCb00, V600R006C00
HuaweiTE60V100R001C01SPC100, V100R001C10, V100R001C10SPC300, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC800, V100R003C00, V500R002C00, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200
HuaweiTP3206V100R002C00
HuaweiUSG9500V300R001C01, V300R001C20, V500R001C00, V500R001C20, V500R001C30, V500R001C50
HuaweiUSG9520V300R001C01SPC800PWE
HuaweiUSG9560V300R001C20SPC300
HuaweiVP9660V200R001C02SPC100, V200R001C02SPC200, V200R001C02SPC300, V200R001C02SPC300T, V200R001C02SPC400, V200R001C30SPC100, V200R001C30SPC100B015T, V200R001C30SPC101, V200R001C30SPC101TB015, V200R001C30SPC102T, V200R001C30SPC103T, V200R001C30SPC104T, V200R001C30SPC200, V200R001C30SPC200B022T, V200R001C30SPC201B023T, V200R001C30SPC202B025T, V200R001C30SPC203T, V200R001C30SPC206T, V200R001C30SPC207T, V200R001C30SPC208T, V200R001C30SPC209T, V200R001C30SPC300, V200R001C30SPC400, V200R001C30SPC400B001, V200R001C30SPC400T, V200R001C30SPC401T, V200R001C30SPC402T, V200R001C30SPC403T, V200R001C30SPC404T, V200R001C30SPC405T, V200R001C30SPC600, V200R001C30SPC700, V200R001C30SPC700T, V200R001C30SPC701T, V200R001C30SPC702T, V200R001C30SPC703T, V200R001C30SPC800, V200R001C30SPC800T, V200R001C30SPC900, V200R001C30SPCa00, V200R001C30SPCa00T, V200R001C30SPCa01, V200R001C30SPCa01T, V200R001C30SPCa02T, V200R001C30SPCb00, V200R001C30SPCc00, V200R001C30SPCd00, V200R001C30SPCd00T, V200R001C30SPCd01T, V200R001C30SPCd
HuaweiViewPoint 8660V100R008C03B013SP02, V100R008C03B013SP03, V100R008C03B013SP04, V100R008C03SPC100, V100R008C03SPC200, V100R008C03SPC300, V100R008C03SPC400, V100R008C03SPC500, V100R008C03SPC600, V100R008C03SPC700, V100R008C03SPC800, V100R008C03SPC900, V100R008C03SPCa00, V100R008C03SPCb00, V100R008C03SPCc00
HuaweiViewPoint 9030V100R011C02SPC100, V100R011C03B012SP15, V100R011C03B012SP16, V100R011C03B015SP03, V100R011C03LGWL01SPC100, V100R011C03LGWL01SPC100B012, V100R011C03SPC100, V100R011C03SPC200, V100R011C03SPC300, V100R011C03SPC400, V100R011C03SPC500
HuaweieSpace U1910V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30
HuaweieSpace U1911V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30
HuaweieSpace U1930V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30
HuaweieSpace U1960V100R001C01SPC500, V100R001C20LCRW01T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC600, V100R001C20SPC600T, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30
HuaweieSpace U1980V100R001C01SPC500T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500T, V100R001C20SPC502, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30
HuaweieSpace U1981V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPC700, V100R001C20SPH702, V100R001C20SPH703, V100R001C30, V200R003C00, V200R003C20, V200R003C30

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →