CVE-2019-5293: Huawei AR120-S Firmware

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal.

Affected products

• Huawei AR120-S Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR1200-S Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR1200 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR150-S Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR150 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR160 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR200-S Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR200 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR2200-S Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR2200 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR3200 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei AR3600 Firmware: version v200r006c10 only
• Huawei NETENGINE16EX Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei SRG1300 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei SRG2300 Firmware: version v200r005c20 only; version v200r006c10 only
• Huawei SRG3300 Firmware: version v200r005c20 only; version v200r006c10 only

Published 2019-11-13. Last modified 2026-06-17.