Vulnerabilities > CVE-2019-5274 - Infinite Loop vulnerability in Huawei Usg9500 Firmware V500R001C30/V500R001C60

Summary

USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

References