CVE-2019-5272

Description

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection.

Risk Information

Base Score

4.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.067

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5272 ,CVE-2019-5273 ,CVE-2019-5274 ,CVE-2019-5275 are affected in usg9500_firmware v500r001c60	NCM
Vulnerabilities CVE-2019-5272 ,CVE-2019-5273 ,CVE-2019-5274 ,CVE-2019-5275 are affected in usg9500_firmware v500r001c30	NCM
Improper Validation of Integrity Check Value Vulnerability (CVE-2019-5272)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234