Huawei AR3200 Firmware vulnerabilities

52 CVEs affecting Huawei AR3200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19417, published 2020-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6206, published 2017-03-24. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted packet.
CVE-2017-15332, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2017-15331, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…
CVE-2014-4705, published 2018-01-30. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200,…
CVE-2016-5368, published 2016-06-30. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS)…
CVE-2016-3950, published 2016-04-18. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets.
CVE-2017-15344, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software…
CVE-2017-15343, published 2018-02-15. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software…
CVE-2017-15317, published 2017-12-22. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00,…
CVE-2017-17296, published 2018-02-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00,…

Latest

CVE-2019-19417, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19416, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2019-19415, published 2020-07-08. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the…
CVE-2020-9071, published 2020-06-01. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker…
CVE-2020-9068, published 2020-04-27. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to…
CVE-2019-5304, published 2020-01-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Echo Request messages to the target products. Due to insufficient input validation…
CVE-2019-5259, published 2019-12-16. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can…
CVE-2019-5291, published 2019-12-13. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the…
CVE-2019-5294, published 2019-11-13. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow…
CVE-2019-5293, published 2019-11-13. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages…