description: The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.
problem types: DoS
affected:
{
product: AR120-S
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20 V200R008C30
}
{
product: AR1200
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20 V200R008C30
}
{
product: AR1200-S
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR150
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR150-S
vendor: Huawei
versions:
status: affected, version: V200R006C10SPC300
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR160
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C12
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR200
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR200-S
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR2200
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C13
status: affected, version: V200R006C16PWE
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR2200-S
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR3200
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C11
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R007C02
status: affected, version: V200R008C00
status: affected, version: V200R008C10
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: AR3600
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C01
status: affected, version: V200R008C20
}
{
product: AR510
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R006C12
status: affected, version: V200R006C13
status: affected, version: V200R006C15
status: affected, version: V200R006C16
status: affected, version: V200R006C17
status: affected, version: V200R007C00SPC180T
status: affected, version: V200R007C00SPC600
status: affected, version: V200R007C00SPC900
status: affected, version: V200R007C00SPCb00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: DP300
vendor: Huawei
versions:
status: affected, version: V500R002C00
}
{
product: IPS Module
vendor: Huawei
versions:
status: affected, version: V100R001C10
status: affected, version: V100R001C20
status: affected, version: V100R001C30
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: NGFW Module
vendor: Huawei
versions:
status: affected, version: V100R001C10
status: affected, version: V100R001C20
status: affected, version: V100R001C30
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R002C00
status: affected, version: V500R002C10
}
{
product: NIP6300
vendor: Huawei
versions:
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: NIP6600
vendor: Huawei
versions:
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: NIP6800
vendor: Huawei
versions:
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: NetEngine16EX
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: RSE6500
vendor: Huawei
versions:
status: affected, version: V500R002C00
}
{
product: SMC2.0
vendor: Huawei
versions:
status: affected, version: V100R003C00SPC200T
status: affected, version: V100R003C00SPC300T
status: affected, version: V100R003C00SPC301T
status: affected, version: V100R003C10
status: affected, version: V100R005C00SPC100
status: affected, version: V100R005C00SPC101B001T
status: affected, version: V100R005C00SPC102
status: affected, version: V100R005C00SPC103
status: affected, version: V100R005C00SPC200
status: affected, version: V100R005C00SPC201T
status: affected, version: V500R002C00
status: affected, version: V600R006C00
}
{
product: SRG1300
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SRG2300
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R007C02
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SRG3300
vendor: Huawei
versions:
status: affected, version: V200R006C10
status: affected, version: V200R007C00
status: affected, version: V200R008C20
status: affected, version: V200R008C30
}
{
product: SVN5600
vendor: Huawei
versions:
status: affected, version: V200R003C00
status: affected, version: V200R003C10
}
{
product: SVN5800
vendor: Huawei
versions:
status: affected, version: V200R003C00
status: affected, version: V200R003C10
}
{
product: SVN5800-C
vendor: Huawei
versions:
status: affected, version: V200R003C00
status: affected, version: V200R003C10
}
{
product: SeMG9811
vendor: Huawei
versions:
status: affected, version: V300R001C01SPC500
status: affected, version: V300R001C01SPC500T
status: affected, version: V300R001C01SPC700
status: affected, version: V300R001C01SPCa00
}
{
product: Secospace USG6300
vendor: Huawei
versions:
status: affected, version: V100R001C10
status: affected, version: V100R001C20
status: affected, version: V100R001C30
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: Secospace USG6500
vendor: Huawei
versions:
status: affected, version: V100R001C10
status: affected, version: V100R001C20
status: affected, version: V100R001C30
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: Secospace USG6600
vendor: Huawei
versions:
status: affected, version: V100R001C00
status: affected, version: V100R001C10
status: affected, version: V100R001C20
status: affected, version: V100R001C30
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: SoftCo
vendor: Huawei
versions:
status: affected, version: V200R001C01SPC300
status: affected, version: V200R001C01SPC400
status: affected, version: V200R001C01SPC500
status: affected, version: V200R001C01SPC600
status: affected, version: V200R001C01SPH703
status: affected, version: V200R003C00SPC100
status: affected, version: V200R003C00SPC200
status: affected, version: V200R003C00SPC300
status: affected, version: V200R003C00SPC500
status: affected, version: V200R003C20
}
{
product: TE30
vendor: Huawei
versions:
status: affected, version: V100R001C02SPC100
status: affected, version: V100R001C02SPC200 V100R001C10
status: affected, version: V500R002C00SPC200
status: affected, version: V500R002C00SPC600
status: affected, version: V500R002C00SPC700
status: affected, version: V500R002C00SPC900
status: affected, version: V500R002C00SPCb00
status: affected, version: V600R006C00
}
{
product: TE40
vendor: Huawei
versions:
status: affected, version: V500R002C00SPC600
status: affected, version: V500R002C00SPC700
status: affected, version: V500R002C00SPC900
status: affected, version: V500R002C00SPCb00
status: affected, version: V600R006C00
}
{
product: TE50
vendor: Huawei
versions:
status: affected, version: V500R002C00SPC600
status: affected, version: V500R002C00SPCb00
status: affected, version: V600R006C00
}
{
product: TE60
vendor: Huawei
versions:
status: affected, version: V100R001C01SPC100
status: affected, version: V100R001C10
status: affected, version: V100R001C10SPC300
status: affected, version: V100R001C10SPC400
status: affected, version: V100R001C10SPC500
status: affected, version: V100R001C10SPC600
status: affected, version: V100R001C10SPC800
status: affected, version: V100R003C00
status: affected, version: V500R002C00
status: affected, version: V500R002C00SPC100
status: affected, version: V500R002C00SPC200
status: affected, version: V500R002C00SPC300
status: affected, version: V500R002C00SPC600
status: affected, version: V500R002C00SPC700
status: affected, version: V500R002C00SPC800
status: affected, version: V500R002C00SPC900
status: affected, version: V500R002C00SPCa00
status: affected, version: V500R002C00SPCb00
status: affected, version: V600R006C00
status: affected, version: V600R006C00SPC200
}
{
product: TP3206
vendor: Huawei
versions:
status: affected, version: V100R002C00
}
{
product: USG9500
vendor: Huawei
versions:
status: affected, version: V300R001C01
status: affected, version: V300R001C20
status: affected, version: V500R001C00
status: affected, version: V500R001C20
status: affected, version: V500R001C30
status: affected, version: V500R001C50
}
{
product: USG9520
vendor: Huawei
versions:
status: affected, version: V300R001C01SPC800PWE
}
{
product: USG9560
vendor: Huawei
versions:
status: affected, version: V300R001C20SPC300
}
{
product: VP9660
vendor: Huawei
versions:
status: affected, version: V200R001C02SPC100
status: affected, version: V200R001C02SPC200
status: affected, version: V200R001C02SPC300
status: affected, version: V200R001C02SPC300T
status: affected, version: V200R001C02SPC400
status: affected, version: V200R001C30SPC100
status: affected, version: V200R001C30SPC100B015T
status: affected, version: V200R001C30SPC101
status: affected, version: V200R001C30SPC101TB015
status: affected, version: V200R001C30SPC102T
status: affected, version: V200R001C30SPC103T
status: affected, version: V200R001C30SPC104T
status: affected, version: V200R001C30SPC200
status: affected, version: V200R001C30SPC200B022T
status: affected, version: V200R001C30SPC201B023T
status: affected, version: V200R001C30SPC202B025T
status: affected, version: V200R001C30SPC203T
status: affected, version: V200R001C30SPC206T
status: affected, version: V200R001C30SPC207T
status: affected, version: V200R001C30SPC208T
status: affected, version: V200R001C30SPC209T
status: affected, version: V200R001C30SPC300
status: affected, version: V200R001C30SPC400
status: affected, version: V200R001C30SPC400B001
status: affected, version: V200R001C30SPC400T
status: affected, version: V200R001C30SPC401T
status: affected, version: V200R001C30SPC402T
status: affected, version: V200R001C30SPC403T
status: affected, version: V200R001C30SPC404T
status: affected, version: V200R001C30SPC405T
status: affected, version: V200R001C30SPC600
status: affected, version: V200R001C30SPC700
status: affected, version: V200R001C30SPC700T
status: affected, version: V200R001C30SPC701T
status: affected, version: V200R001C30SPC702T
status: affected, version: V200R001C30SPC703T
status: affected, version: V200R001C30SPC800
status: affected, version: V200R001C30SPC800T
status: affected, version: V200R001C30SPC900
status: affected, version: V200R001C30SPCa00
status: affected, version: V200R001C30SPCa00T
status: affected, version: V200R001C30SPCa01
status: affected, version: V200R001C30SPCa01T
status: affected, version: V200R001C30SPCa02T
status: affected, version: V200R001C30SPCb00
status: affected, version: V200R001C30SPCc00
status: affected, version: V200R001C30SPCd00
status: affected, version: V200R001C30SPCd00T
status: affected, version: V200R001C30SPCd01T
status: affected, version: V200R001C30SPCd
}
{
product: ViewPoint 8660
vendor: Huawei
versions:
status: affected, version: V100R008C03B013SP02
status: affected, version: V100R008C03B013SP03
status: affected, version: V100R008C03B013SP04
status: affected, version: V100R008C03SPC100
status: affected, version: V100R008C03SPC200
status: affected, version: V100R008C03SPC300
status: affected, version: V100R008C03SPC400
status: affected, version: V100R008C03SPC500
status: affected, version: V100R008C03SPC600
status: affected, version: V100R008C03SPC700
status: affected, version: V100R008C03SPC800
status: affected, version: V100R008C03SPC900
status: affected, version: V100R008C03SPCa00
status: affected, version: V100R008C03SPCb00
status: affected, version: V100R008C03SPCc00
}
{
product: ViewPoint 9030
vendor: Huawei
versions:
status: affected, version: V100R011C02SPC100
status: affected, version: V100R011C03B012SP15
status: affected, version: V100R011C03B012SP16
status: affected, version: V100R011C03B015SP03
status: affected, version: V100R011C03LGWL01SPC100
status: affected, version: V100R011C03LGWL01SPC100B012
status: affected, version: V100R011C03SPC100
status: affected, version: V100R011C03SPC200
status: affected, version: V100R011C03SPC300
status: affected, version: V100R011C03SPC400
status: affected, version: V100R011C03SPC500
}
{
product: eSpace U1910
vendor: Huawei
versions:
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC500
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPH703
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
{
product: eSpace U1911
vendor: Huawei
versions:
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC500
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPH309
status: affected, version: V100R001C20SPH703
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
{
product: eSpace U1930
vendor: Huawei
versions:
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC500
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPH703
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
{
product: eSpace U1960
vendor: Huawei
versions:
status: affected, version: V100R001C01SPC500
status: affected, version: V100R001C20LCRW01T
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPC600T
status: affected, version: V100R001C20SPH309
status: affected, version: V100R001C20SPH703
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
{
product: eSpace U1980
vendor: Huawei
versions:
status: affected, version: V100R001C01SPC500T
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC500T
status: affected, version: V100R001C20SPC502
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPH309
status: affected, version: V100R001C20SPH703
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
{
product: eSpace U1981
vendor: Huawei
versions:
status: affected, version: V100R001C20SPC300
status: affected, version: V100R001C20SPC400
status: affected, version: V100R001C20SPC500
status: affected, version: V100R001C20SPC600
status: affected, version: V100R001C20SPC700
status: affected, version: V100R001C20SPH702
status: affected, version: V100R001C20SPH703
status: affected, version: V100R001C30
status: affected, version: V200R003C00
status: affected, version: V200R003C20
status: affected, version: V200R003C30
}
