{"id": "CVE-2019-5259", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-12-16T22:15:11.370", "references": [{"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-vrp-en", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "There is an information leakage vulnerability on some Huawei products(AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an information disclosure condition."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de filtrado de informaci\u00f3n en algunos productos Huawei (AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600). Un atacante con permisos bajos puede visualizar cierta informaci\u00f3n de alto privilegio mediante la ejecuci\u00f3n de comandos espec\u00edficos. Una explotaci\u00f3n con \u00e9xito podr\u00eda causar una condici\u00f3n de divulgaci\u00f3n de informaci\u00f3n."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D81E2517-263C-4B59-9D28-A3DE98289B24"}, {"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9EC3BAF-54F8-4EEC-A99B-D8BD458EE638"}, {"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DD9E894-321E-4A61-9DA6-677042DDD739"}, {"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14AE26C9-C434-4EFB-A1E6-64563BFAA389"}, {"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A7BC931-9C91-4AA1-A125-3FE7F4CBD43F"}, {"criteria": "cpe:2.3:o:huawei:ar120-s_firmware:v200r010c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D594238B-295E-4CE0-A089-E4AB45A9A8FC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D0CFDB51-BF44-4433-AB2A-CFF553F8D640"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F8934C1-9162-4C52-A0FC-6B2914E93304"}, {"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4045CC4E-3B44-4E32-A04F-39C8572921B3"}, {"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFE416CD-53B5-4E08-BB30-682887740C3D"}, {"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F64071E5-6ACD-4E51-9162-B0FF3DC08E07"}, {"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75E27982-56E6-4A6F-9124-34C7420FDDE1"}, {"criteria": "cpe:2.3:o:huawei:ar1200_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EB8B580-EF85-44FE-A7A1-455CD5A7BF85"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D4BA4150-8CA8-48BF-9D45-ABC8AC710060"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BC1D978-9DA1-4165-A66C-2D274B188C88"}, {"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE7D76DA-E30F-4071-807B-DED30596CD45"}, {"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB60F62-0715-4C1E-B352-A3D61B56E2AD"}, {"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D125153E-FE39-49A7-95AA-9482C78E7114"}, {"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF226F5B-7BF8-4475-8C0C-91E2E43C6E53"}, {"criteria": "cpe:2.3:o:huawei:ar1200-s_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FE54D66-BE3A-492D-B381-4E63880D8088"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B053C248-3CC2-476D-95A7-90EDD8EAAD69"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDFC3878-5A1D-4846-B4F9-3D1FC1DBCF5A"}, {"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9A3CE39-6AC0-45E4-94B0-535AA92DAAF7"}, {"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0D92A6F-B30C-4E09-91FC-9C7FFF375710"}, {"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "455D7A4E-523E-40C8-958D-59D128F3E797"}, {"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25AB058D-C4EB-416F-ACD3-B6ACC2BD83AA"}, {"criteria": "cpe:2.3:o:huawei:ar150_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "411499D2-DD34-4131-8310-0CCC351D28F6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "526371A8-11FE-4D00-AFBB-8E867A320B27"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B2B9CC5-9FC3-4A2B-8968-E0B26F3D0097"}, {"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01485D20-8F48-4D48-9242-95CD59069023"}, {"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72BC8C3E-420F-49D1-9E58-98E4E23A024F"}, {"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "787AC5E3-CE88-491D-8211-BAB11112019D"}, {"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C194C888-308D-4301-A277-598AD954010E"}, {"criteria": "cpe:2.3:o:huawei:ar150-s_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "567AF236-D610-4536-A9FE-1A795A0BADBB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED3D18A0-71EC-4B1E-89FC-9522F9A64ACA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "372E2136-95CE-4833-B4AF-306F0807BA79"}, {"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6ABEF8DE-D6CA-45DD-B10E-C3FFB5B82FE7"}, {"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85A72083-717F-4C71-A2D7-62E1C64FEE94"}, {"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B15E8B7-9F4B-45F1-B4FF-B32AF8CEA9FA"}, {"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D609298-9ACE-4726-AD04-6765D8F2C374"}, {"criteria": "cpe:2.3:o:huawei:ar160_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A07BC16A-C102-4B21-BF61-C7AE1452BA3E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "137A007D-A498-483F-8B4F-DCA118B25F11"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "629DF7DD-4900-41CB-B257-7DE20A9B9DFB"}, {"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75A87025-03BE-4671-9687-85510E9AE4C3"}, {"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7C77ADC-2511-4630-B5F5-F2991EA39E0A"}, {"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "622686BB-9302-449F-9351-75B189D1B184"}, {"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1ED9DF8-A444-4684-932D-12B4B2F98736"}, {"criteria": "cpe:2.3:o:huawei:ar200_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C06FB07B-D74B-42A8-9CE7-CD3FC7217F11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2562CCF8-A4A7-4ACD-AA67-E3DB8B5ADA92"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17586781-04AB-4285-BCA2-5DB13B8D94E3"}, {"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0325B983-F920-4006-8F3B-738B1B4EBEAF"}, {"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7114E20-407A-4B1C-9FCE-FF367B50E0E6"}, {"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE9B95EB-A848-4311-8500-9C909784393E"}, {"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C736642A-6B32-458B-AF12-FD45534BEA60"}, {"criteria": "cpe:2.3:o:huawei:ar200-s_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF9722FF-EF7B-4AE4-82FB-CB7AEEB00E03"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEDFA4F2-3040-4355-B6E0-4F3B9FC2CDDC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DE9947-C096-4B7F-8F3E-748DEFC677C3"}, {"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DA92D38-95BA-4FEB-9A5E-A2604B97B6A0"}, {"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F042B27-F875-4BA3-9002-E5ADC544208B"}, {"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F377CE1E-77A7-447F-B692-A54682A26BB4"}, {"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64CC27CC-EE60-46DE-91CE-6C83AF1F7B3A"}, {"criteria": "cpe:2.3:o:huawei:ar2200_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5658BAA0-3FCC-4DCB-BDD1-42D00263B29D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar2200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "50662078-4827-4706-AE29-170E2239C5AE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8A20ED1-7138-4FD0-BA2B-637D41739603"}, {"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "272E6F06-9FAF-421B-8E87-7F1F1705B598"}, {"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32119825-AF22-44AA-8D04-1FAACF9E2E89"}, {"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A2BC38B-D016-4E83-A14E-FE8575135DD9"}, {"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3409C0D7-74AF-46AD-9E93-9D1F187C291F"}, {"criteria": "cpe:2.3:o:huawei:ar2200-s_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33D9E1E5-FF71-4CDB-BCD5-181781C9717F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar2200-s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5862E1A5-0222-4059-B9D7-716A6D0EB8CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r005c20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C10C07E-5194-4EAB-9AC8-DB87CE52F5FA"}, {"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FE26EE9-2331-4D72-96CF-635A0A4EBE3E"}, {"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB9A3444-A485-4B87-B910-F3DA5C8E5D74"}, {"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9752658E-3CF5-4D9E-98FB-D15FD892479C"}, {"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FD70804-3A07-4C82-806B-5F5CA075ABF1"}, {"criteria": "cpe:2.3:o:huawei:ar3200_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73E5EE31-3D31-4C59-B2C1-B0BCF3294D9D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9309E1AA-0C4E-422C-9307-A8DD0AE5D576"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ar3600_firmware:v200r006c10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26CFB676-658E-4DEF-8C29-13CA633D7270"}, {"criteria": "cpe:2.3:o:huawei:ar3600_firmware:v200r007c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D395DD8-E338-457E-A4E6-D3A08DE1B571"}, {"criteria": "cpe:2.3:o:huawei:ar3600_firmware:v200r008c50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52BBC28A-2A50-402F-B3CA-03718789F503"}, {"criteria": "cpe:2.3:o:huawei:ar3600_firmware:v200r009c00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AAAFF54-8B9F-4528-A2FE-8CF44498024C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ar3600:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D30DC2EA-1F76-4CA6-BAC2-8DC796BE50B1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@huawei.com"}
