8.1

CVE-2019-5268

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Cd10-10 Firmware Version >= 10.0.2.2 < 10.0.2.7
   Huawei ≫ Cd10-10 Version-
Huawei ≫ Cd16-10 Firmware Version >= 10.0.2.3 < 10.0.2.5
   Huawei ≫ Cd16-10 Version-
Huawei ≫ Cd17-10 Firmware Version >= 9.0.3.3 < 10.0.2.5
   Huawei ≫ Cd17-10 Version-
Huawei ≫ Cd18-10 Firmware Version >= 9.0.2.23 < 10.0.2.5
   Huawei ≫ Cd18-10 Version-
Huawei ≫ Hirouter-cd15-10 Firmware Version >= 9.0.2.3 < 10.0.2.5
   Huawei ≫ Hirouter-cd15-10 Version-
Huawei ≫ Hirouter-cd20-10 Firmware Version >= 9.0.3.9 < 10.0.2.6
   Huawei ≫ Hirouter-cd20-10 Version-
Huawei ≫ Hirouter-cd21-16 Firmware Version >= 9.0.3.9 < 10.0.2.5
   Huawei ≫ Hirouter-cd21-16 Version-
Huawei ≫ Hirouter-cd30-10 Firmware Version >= 10.0.2.8 < 10.0.2.9
   Huawei ≫ Hirouter-cd30-10 Version-
Huawei ≫ Hirouter-cd30-11 Firmware Version >= 10.0.2.8 < 10.0.2.9
   Huawei ≫ Hirouter-cd30-11 Version-
Huawei ≫ Hirouter-h1-10 Firmware Version >= 9.0.3.11 < 10.0.2.5
   Huawei ≫ Hirouter-h1-10 Version-
Huawei ≫ Tc5200-10 Firmware Version >= 10.0.2.3 < 10.0.2.5
   Huawei ≫ Tc5200-10 Version-
Huawei ≫ Ws5100-10 Firmware Version >= 9.0.3.11 < 10.0.2.7
   Huawei ≫ Ws5100-10 Version-
Huawei ≫ Ws5102-10 Firmware Version >= 10.0.2.2 < 10.0.2.7
   Huawei ≫ Ws5102-10 Version-
Huawei ≫ Ws5106-10 Firmware Version >= 10.0.2.2 < 10.0.2.7
   Huawei ≫ Ws5106-10 Version-
Huawei ≫ Ws5108-10 Firmware Version >= 10.0.2.2 < 10.0.2.7
   Huawei ≫ Ws5108-10 Version-
Huawei ≫ Ws5200-10 Firmware Version >= 9.0.3.9 < 10.0.2.6
   Huawei ≫ Ws5200-10 Version-
Huawei ≫ Ws5200-11 Firmware Version9.0.3.11
   Huawei ≫ Ws5200-11 Version-
Huawei ≫ Ws5200-11 Firmware Version10.0.2.3
   Huawei ≫ Ws5200-11 Version-
Huawei ≫ Ws5280-10 Firmware Version >= 9.0.3.22 < 10.0.2.6
   Huawei ≫ Ws5280-10 Version-
Huawei ≫ Ws5280-11 Firmware Version >= 9.0.3.22 < 10.0.2.6
   Huawei ≫ Ws5280-11 Version-
Huawei ≫ Ws6500-10 Firmware Version >= 10.0.2.3 < 10.0.2.5
   Huawei ≫ Ws6500-10 Version-
Huawei ≫ Ws6500-11 Firmware Version >= 10.0.2.2 < 10.0.2.7
   Huawei ≫ Ws6500-11 Version-
Huawei ≫ Ws826-10 Firmware Version >= 9.0.3.11 < 10.0.2.5
   Huawei ≫ Ws826-10 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.204
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.1 2.8 5.2
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 4.8 6.5 4.9
AV:A/AC:L/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.