CVE-2019-5294: Huawei AR120-S Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal.

Affected products

  • Huawei AR120-S Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR1200-S Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR1200 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR150-S Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR150 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR160 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR200-S Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR200 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR2200-S Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR2200 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei AR3200 Firmware: version v200r005c20 only; version v200r006c10 only
  • Huawei AR3600 Firmware: version v200r006c10 only; version v200r007c00 only
  • Huawei NETENGINE16EX Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei SRG1300 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei SRG2300 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only
  • Huawei SRG3300 Firmware: version v200r005c20 only; version v200r006c10 only; version v200r007c00 only

Published 2019-11-13. Last modified 2026-06-17.