VULNERABILITY INTELLIGENCE
CVE-2019-5272
CVSS score4.9 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2019-12-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection.
Weakness classification
- CWE-354: Improper Validation of Integrity Check Value
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory