CVSS 3.1
8.1 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2019-5268
Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- huawei:cd10-10_firmware
- huawei:cd16-10_firmware
- huawei:cd17-10_firmware
- huawei:cd18-10_firmware
- huawei:hirouter-cd15-10_firmware
- huawei:hirouter-cd20-10_firmware
- huawei:hirouter-cd21-16_firmware
- huawei:hirouter-cd30-10_firmware
- huawei:hirouter-cd30-11_firmware
- huawei:hirouter-h1-10_firmware
- huawei:tc5200-10_firmware
- huawei:ws5100-10_firmware
- huawei:ws5102-10_firmware
- huawei:ws5106-10_firmware
- huawei:ws5108-10_firmware
- huawei:ws5200-10_firmware
- huawei:ws5200-11_firmware
- huawei:ws5280-10_firmware
- huawei:ws5280-11_firmware
- huawei:ws6500-10_firmware
- huawei:ws6500-11_firmware
- huawei:ws826-10_firmware