HIGH🇵🇱 Wersja polska

CVE-2019-5268

CVSS 8.1v3.1pub. 2019-11-29upd. 2024-11-21

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Huawei Cd10 10

    HW
    Huawei
    all versions

  • Huawei Cd10 10 Firmware

    OS
    Huawei
    10.0.2.2 – 10.0.2.7 (excl.)

  • Huawei Cd16 10

    HW
    Huawei
    all versions

  • Huawei Cd16 10 Firmware

    OS
    Huawei
    10.0.2.3 – 10.0.2.5 (excl.)

  • Huawei Cd17 10

    HW
    Huawei
    all versions

  • Huawei Cd17 10 Firmware

    OS
    Huawei
    9.0.3.3 – 10.0.2.5 (excl.)

  • Huawei Cd18 10

    HW
    Huawei
    all versions

  • Huawei Cd18 10 Firmware

    OS
    Huawei
    9.0.2.23 – 10.0.2.5 (excl.)

  • Huawei Hirouter Cd15 10

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd15 10 Firmware

    OS
    Huawei
    9.0.2.3 – 10.0.2.5 (excl.)

  • Huawei Hirouter Cd20 10

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd20 10 Firmware

    OS
    Huawei
    9.0.3.9 – 10.0.2.6 (excl.)

  • Huawei Hirouter Cd21 16

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd21 16 Firmware

    OS
    Huawei
    9.0.3.9 – 10.0.2.5 (excl.)

  • Huawei Hirouter Cd30 10

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd30 10 Firmware

    OS
    Huawei
    10.0.2.8 – 10.0.2.9 (excl.)

  • Huawei Hirouter Cd30 11

    HW
    Huawei
    all versions

  • Huawei Hirouter Cd30 11 Firmware

    OS
    Huawei
    10.0.2.8 – 10.0.2.9 (excl.)

  • Huawei Hirouter H1 10

    HW
    Huawei
    all versions

  • Huawei Hirouter H1 10 Firmware

    OS
    Huawei
    9.0.3.11 – 10.0.2.5 (excl.)

  • Huawei Tc5200 10

    HW
    Huawei
    all versions

  • Huawei Tc5200 10 Firmware

    OS
    Huawei
    10.0.2.3 – 10.0.2.5 (excl.)

  • Huawei Ws5100 10

    HW
    Huawei
    all versions

  • Huawei Ws5100 10 Firmware

    OS
    Huawei
    9.0.3.11 – 10.0.2.7 (excl.)

  • Huawei Ws5102 10

    HW
    Huawei
    all versions

  • Huawei Ws5102 10 Firmware

    OS
    Huawei
    10.0.2.2 – 10.0.2.7 (excl.)

  • Huawei Ws5106 10

    HW
    Huawei
    all versions

  • Huawei Ws5106 10 Firmware

    OS
    Huawei
    10.0.2.2 – 10.0.2.7 (excl.)

  • Huawei Ws5108 10

    HW
    Huawei
    all versions

  • Huawei Ws5108 10 Firmware

    OS
    Huawei
    10.0.2.2 – 10.0.2.7 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-5269HIGH7.8same product

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certai...

CVE-2018-7937HIGH7.8same product

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there ...

CVE-2020-9122MEDIUM6.5same product

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnera...

CVE-2020-9069MEDIUM6.5same product

There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker c...

CVE-2019-0708CRITICAL9.8⚠ KEVPL ✓same vendor

BlueKeep — krytyczny RCE w Remote Desktop Services (RDP)