Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2019-5255

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace…

Medium5.5EPSS 0.20%
Published
Updated
Reserved
Assigned by
huawei

Description

Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981) have a DoS vulnerability. An attacker may send crafted messages from a FTP client to exploit this vulnerability. Due to insufficient validation of the message, successful exploit may cause the system out-of-bounds read and result in a denial of service condition of the affected service.

Scores

CVSS scores of CVE-2019-5255, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.20% · top 90% of all CVEs (5 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981

    • affected V200R005C30
    • affected V200R006C10
    • affected V200R006C20
    • affected V200R007C10
    • affected V200R007C20
    • affected V200R008C00
    • affected V200R008C10
    • affected V200R009C00
    • affected V500R001C00SPC300
    • affected V500R001C00SPC500
    • affected V500R001C00SPH303
    • affected V500R001C00SPH508
    • affected V500R001C20
    • affected V500R001C20SPC100
    • affected V500R001C20SPC100PWE
    • affected V500R001C20SPC200
    • affected V500R001C20SPC200B062
    • affected V500R001C20SPC200PWE
    • affected V500R001C20SPC300B078
    • affected V500R001C20SPC300PWE
    • affected V500R001C30
    • affected V500R001C30SPC100
    • affected V500R001C30SPC100PWE
    • affected V500R001C30SPC200
    • affected V500R001C30SPC200PWE
    • affected V500R001C30SPC300
    • affected V500R001C50
    • affected V500R001C50PWE
    • affected V500R001C80
    • affected V500R005C00
    • affected V500R001C00SPC500PWE
    • affected V500R002C00
    • affected V500R002C00SPC100
    • affected V500R002C00SPC100PWE
    • affected V500R002C00SPC200
    • affected V500R002C00SPC200PWE
    • affected V500R002C00SPC300
    • affected V500R002C10
    • affected V500R002C10PWE
    • affected V500R002C30
    • and 47 more

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2019-5255 badge
[![CVE-2019-5255](https://trackcve.app/badge/CVE-2019-5255.svg)](https://trackcve.app/cve/CVE-2019-5255)

Record last updated .