CVE-2019-5272

4.9 mediumEPSS 0.3%

Medium (4.9) in huawei usg9500 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-354
Published: 2019-12-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:usg9500_firmware

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en

Check your stack JSON