CVE-2019-19397

High

Description

There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.

SeverityHigh
CVSS7.5
Exploit probability—
ProductHuawei S12700 Firmware
PublishedDec 13, 2019
First seenDec 13, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
huawei s12700_firmwarev200r007c00, v200r007c01, v200r007c20, v200r008c00, v200r010c00, v200r011c10, v200r012c00—
huawei s1700_firmwarev200r006c10, v200r010c00, v200r011c10, v200r012c00, v200r012c20—
huawei s2700_firmwarev200r006c00, v200r006c10, v200r007c00, v200r008c00, v200r010c00, v200r011c00, v200r011c10, v200r012c00—
huawei s5700_firmwarev200r005c00, v200r005c02, v200r005c03, v200r006c00, v200r007c00, v200r008c00, v200r010c00, v200r011c00, v200r011c10, v200r012c00, v200r012c20—
huawei s6700_firmwarev200r005c00, v200r005c01, v200r005c02, v200r008c00, v200r010c00, v200r011c00, v200r011c10, v200r012c00—
huawei s7700_firmwarev200r006c00, v200r007c00, v200r008c00, v200r010c00, v200r011c10, v200r012c00—
huawei s9700_firmwarev200r006c00, v200r007c00, v200r007c01, v200r008c00, v200r010c00, v200r011c10, v200r012c00—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.