CVE-2019-5300

Description

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Risk Information

Base Score

6.7

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.011

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5300 are affected in ar1200_firmware v200r010c00	NCM
Vulnerabilities CVE-2019-5300 are affected in ar1200_firmware v200r009c00	NCM
Vulnerabilities CVE-2019-5300 are affected in ar1200_firmware v200r008c50	NCM
Vulnerabilities CVE-2019-5300 are affected in ar1200_firmware v200r008c20	NCM
Vulnerabilities CVE-2019-5300 are affected in ar1200_firmware v200r007c00	NCM
Improper Verification of Cryptographic Signature Vulnerability (CVE-2019-5300)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234