CVE-2019-5259: Huawei AR120-S Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition.

Affected products

Huawei AR120-S Firmware: version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
Huawei AR1200-S Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR1200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR150-S Firmware: version v200r005c00 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR150 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR160 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR200-S Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR2200-S Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR2200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR3200 Firmware: version v200r005c20 only; version v200r005c32 only; version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only
Huawei AR3600 Firmware: version v200r006c10 only; version v200r007c00 only; version v200r008c50 only; version v200r009c00 only

Published 2019-12-16. Last modified 2026-06-17.