CVE-2019-5268

Name: CVE-2019-5268
Creator: NVD / NIST
Published: 2019-11-29T21:15:11.387+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.1/10EPSS 0.38%

Last modified Jun 17, 2026

CVE-2019-5268 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.

Description

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Metrics

CVSS 3.1

8.1/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Probability

0.38%

30.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-20

Affected Software

Vendor	Product	Versions
Huawei	Cd10-10 Firmware	>= 10.0.2.2, < 10.0.2.7
Huawei	Cd16-10 Firmware	>= 10.0.2.3, < 10.0.2.5
Huawei	Cd17-10 Firmware	>= 9.0.3.3, < 10.0.2.5
Huawei	Cd18-10 Firmware	>= 9.0.2.23, < 10.0.2.5
Huawei	Hirouter-Cd15-10 Firmware	>= 9.0.2.3, < 10.0.2.5
Huawei	Hirouter-Cd20-10 Firmware	>= 9.0.3.9, < 10.0.2.6
Huawei	Hirouter-Cd21-16 Firmware	>= 9.0.3.9, < 10.0.2.5
Huawei	Hirouter-Cd30-10 Firmware	>= 10.0.2.8, < 10.0.2.9
Huawei	Hirouter-Cd30-11 Firmware	>= 10.0.2.8, < 10.0.2.9
Huawei	Hirouter-H1-10 Firmware	>= 9.0.3.11, < 10.0.2.5
Huawei	Tc5200-10 Firmware	>= 10.0.2.3, < 10.0.2.5
Huawei	Ws5100-10 Firmware	>= 9.0.3.11, < 10.0.2.7
Huawei	Ws5102-10 Firmware	>= 10.0.2.2, < 10.0.2.7
Huawei	Ws5106-10 Firmware	>= 10.0.2.2, < 10.0.2.7
Huawei	Ws5108-10 Firmware	>= 10.0.2.2, < 10.0.2.7
Huawei	Ws5200-10 Firmware	>= 9.0.3.9, < 10.0.2.6
Huawei	Ws5200-11 Firmware	9.0.3.11
Huawei	Ws5200-11 Firmware	10.0.2.3
Huawei	Ws5280-10 Firmware	>= 9.0.3.22, < 10.0.2.6
Huawei	Ws5280-11 Firmware	>= 9.0.3.22, < 10.0.2.6
Huawei	Ws6500-10 Firmware	>= 10.0.2.3, < 10.0.2.5
Huawei	Ws6500-11 Firmware	>= 10.0.2.2, < 10.0.2.7
Huawei	Ws826-10 Firmware	>= 9.0.3.11, < 10.0.2.5

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-enVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-enVendor Advisory

Timeline

Published: Nov 29, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-5268?

How severe is CVE-2019-5268?

CVE-2019-5268 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.38% probability of exploitation in the next 30 days.

How do I fix CVE-2019-5268?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-5268?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST