Huawei – Vulnerability in the SIP Module of Some Huawei Products

By: admin_clJuly 15, 2020 5:57 pm

Advisory IDRSN-SIP-1650

Vulnerability Information

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Technical Information

A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition.

Solutions

The UCTM solution from RedShift Networks provides the industry’s first complete security solution developed to secure VOIP networks, endpoints and applications. His research team Condor-Labs.com is constantly looking for new attack patterns, advanced penetration testing methods, vulnerability identification and deployment of new signatures for constantly subscribed clients. For more information visit www.redshiftnetworks.com

External Resources

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en

Common Vulnerabilities and Exposures (CVE)

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19415

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19416