CVE-2019-5258: Huawei AP2000 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a buffer overflow vulnerability. An attacker who logs in to the board may send crafted messages from the internal network port or tamper with inter-process message packets to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the affected board to be abnormal.

Affected products

  • Huawei AP2000 Firmware: version v200r005c30 only; version v200r006c10 only; version v200r006c20 only; version v200r007c10 only; version v200r007c20 only; version v200r008c00 only; …
  • Huawei Espace u1981 Firmware: version v200r003c50spc700 only
  • Huawei Ips Firmware: version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; version v500r001c20 only; version v500r001c20spc100 only; …
  • Huawei Ngfw Firmware: version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; version v500r001c00sph508 only; version v500r001c20 only; …
  • Huawei NIP6300 Firmware: version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; version v500r001c20 only; version v500r001c20spc100 only; …
  • Huawei NIP6600 Firmware: version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00sph303 only; version v500r001c00sph508 only; version v500r001c20 only; version v500r001c20spc100 only; …
  • Huawei NIP6800 Firmware: version v500r001c50 only; version v500r001c50pwe only; version v500r001c80 only; version v500r005c00 only
  • Huawei s5700 Firmware: version v200r005c03 only
  • Huawei Secospace ANTIDDOS8000 Firmware: version v500r001c00 only; version v500r001c00spc200 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc600 only; version v500r001c00spc700 only; …
  • Huawei Secospace USG6300 Firmware: version v100r001c20spc100 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; version v500r001c00sph508 only; …
  • Huawei Secospace USG6500 Firmware: version v100r001c20spc100 only; version v500r001c00spc300 only; version v500r001c00spc500 only; version v500r001c00spc500pwe only; version v500r001c00sph303 only; version v500r001c00sph508 only; …
  • Huawei Secospace USG6600 Firmware: version v100r001c00spc200 only; version v100r001c10spc200 only; version v100r001c10spc201 only; version v100r001c20spc100 only; version v100r001c20spc200 only; version v500r001c00 only; …
  • Huawei SEMG9811 Firmware: version v500r002c20 only; version v500r002c30 only; version v500r005c00 only
  • Huawei SVN5600 Firmware: version v200r003c00spc100 only
  • Huawei SVN5800-C Firmware: version v200r003c00spc100 only
  • Huawei SVN5800 Firmware: version v200r003c00spc100 only
  • Huawei USG6000V Firmware: version v500r001c10 only; version v500r001c10spc100 only; version v500r001c10spc200 only; version v500r001c20 only; version v500r001c20spc100 only; version v500r001c20spc200 only; …

Published 2019-12-13. Last modified 2026-06-17.