Description
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Huawei | AR120-S | V200R006C10, V200R007C00, V200R008C20 V200R008C30 | — |
| Huawei | AR1200 | V200R006C10, V200R007C00, V200R008C20 V200R008C30 | — |
| Huawei | AR1200-S | V200R006C10, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | AR150 | V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 | — |
| Huawei | AR150-S | V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | AR160 | V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 | — |
| Huawei | AR200 | V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30 | — |
| Huawei | AR200-S | V200R006C10, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | AR2200 | V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 | — |
| Huawei | AR2200-S | V200R006C10, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | AR3200 | V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 | — |
| Huawei | AR3600 | V200R006C10, V200R007C00, V200R007C01, V200R008C20 | — |
| Huawei | AR510 | V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R007C00SPC600, V200R007C00SPC900, V200R007C00SPCb00, V200R008C20, V200R008C30 | — |
| Huawei | DP300 | V500R002C00 | — |
| Huawei | IPS Module | V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | NGFW Module | V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10 | — |
| Huawei | NIP6300 | V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | NIP6600 | V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | NIP6800 | V500R001C30, V500R001C50 | — |
| Huawei | NetEngine16EX | V200R006C10, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | RSE6500 | V500R002C00 | — |
| Huawei | SMC2.0 | V100R003C00SPC200T, V100R003C00SPC300T, V100R003C00SPC301T, V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 | — |
| Huawei | SRG1300 | V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30 | — |
| Huawei | SRG2300 | V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30 | — |
| Huawei | SRG3300 | V200R006C10, V200R007C00, V200R008C20, V200R008C30 | — |
| Huawei | SVN5600 | V200R003C00, V200R003C10 | — |
| Huawei | SVN5800 | V200R003C00, V200R003C10 | — |
| Huawei | SVN5800-C | V200R003C00, V200R003C10 | — |
| Huawei | SeMG9811 | V300R001C01SPC500, V300R001C01SPC500T, V300R001C01SPC700, V300R001C01SPCa00 | — |
| Huawei | Secospace USG6300 | V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | Secospace USG6500 | V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | Secospace USG6600 | V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | SoftCo | V200R001C01SPC300, V200R001C01SPC400, V200R001C01SPC500, V200R001C01SPC600, V200R001C01SPH703, V200R003C00SPC100, V200R003C00SPC200, V200R003C00SPC300, V200R003C00SPC500, V200R003C20 | — |
| Huawei | TE30 | V100R001C02SPC100, V100R001C02SPC200 V100R001C10, V500R002C00SPC200, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00 | — |
| Huawei | TE40 | V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00 | — |
| Huawei | TE50 | V500R002C00SPC600, V500R002C00SPCb00, V600R006C00 | — |
| Huawei | TE60 | V100R001C01SPC100, V100R001C10, V100R001C10SPC300, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC800, V100R003C00, V500R002C00, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SP… | — |
| Huawei | TP3206 | V100R002C00 | — |
| Huawei | USG9500 | V300R001C01, V300R001C20, V500R001C00, V500R001C20, V500R001C30, V500R001C50 | — |
| Huawei | USG9520 | V300R001C01SPC800PWE | — |
| Huawei | USG9560 | V300R001C20SPC300 | — |
| Huawei | VP9660 | V200R001C02SPC100, V200R001C02SPC200, V200R001C02SPC300, V200R001C02SPC300T, V200R001C02SPC400, V200R001C30SPC100, V200R001C30SPC100B015T, V200R001C30SPC101, V200R001C30SPC101TB015, V200R001C30SPC102T, V200R001C30SPC103T, V200R001C30SPC104T, V200R001C30SPC200, V200R001C30SPC200B022T, V200R001C30SPC… | — |
| Huawei | ViewPoint 8660 | V100R008C03B013SP02, V100R008C03B013SP03, V100R008C03B013SP04, V100R008C03SPC100, V100R008C03SPC200, V100R008C03SPC300, V100R008C03SPC400, V100R008C03SPC500, V100R008C03SPC600, V100R008C03SPC700, V100R008C03SPC800, V100R008C03SPC900, V100R008C03SPCa00, V100R008C03SPCb00, V100R008C03SPCc00 | — |
| Huawei | ViewPoint 9030 | V100R011C02SPC100, V100R011C03B012SP15, V100R011C03B012SP16, V100R011C03B015SP03, V100R011C03LGWL01SPC100, V100R011C03LGWL01SPC100B012, V100R011C03SPC100, V100R011C03SPC200, V100R011C03SPC300, V100R011C03SPC400, V100R011C03SPC500 | — |
| Huawei | eSpace U1910 | V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 | — |
| Huawei | eSpace U1911 | V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 | — |
| Huawei | eSpace U1930 | V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 | — |
| Huawei | eSpace U1960 | V100R001C01SPC500, V100R001C20LCRW01T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC600, V100R001C20SPC600T, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 | — |
| Huawei | eSpace U1980 | V100R001C01SPC500T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500T, V100R001C20SPC502, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 | — |
| Huawei | eSpace U1981 | V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPC700, V100R001C20SPH702, V100R001C20SPH703, V100R001C30, V200R003C00, V200R003C20, V200R003C30 | — |