The vulnerability of Huawei routers stems from insufficient validation of input data. This allows attackers to gain access to arbitrary files and upload those files onto vulnerable devices.

🗓️ 08 Jan 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Huawei router input validation flaw allows attackers to access arbitrary files and upload them.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-5268	5 Mar 202416:52	–	circl
CNVD	Multiple Huawei Products Input Validation Error Vulnerability	15 Nov 201900:00	–	cnvd
CVE	CVE-2019-5268	29 Nov 201920:01	–	cve
Cvelist	CVE-2019-5268	29 Nov 201920:01	–	cvelist
EUVD	EUVD-2019-14873	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Two Vulnerabilities in Some Huawei Home Routers	13 Nov 201900:00	–	huawei
NVD	CVE-2019-5268	29 Nov 201921:15	–	nvd
OSV	CVE-2019-5268	29 Nov 201921:15	–	osv
Prion	Input validation	29 Nov 201921:15	–	prion
RedhatCVE	CVE-2019-5268	22 May 202505:07	–	redhatcve

Vulners

Node

huawei_technologies_co.,huawei_cd10-10Match10.0.2.2

OR

huawei_technologies_co.,huawei_cd16-10Match10.0.2.3

OR

huawei_technologies_co.,huawei_cd17-10Match9.0.3.3

OR

huawei_technologies_co.,huawei_cd18-10Match9.0.2.23

OR

huawei_technologies_co.,huawei_hirouter-cd15-10Match9.0.2.3

OR

huawei_technologies_co.,huawei_hirouter-cd20-10Match9.0.3.9

OR

huawei_technologies_co.,huawei_hirouter-cd21-16Match9.0.3.9

OR

huawei_technologies_co.,huawei_hirouter-cd30-10Match10.0.2.8

OR

huawei_technologies_co.,huawei_hirouter-cd30-11Match10.0.2.8

OR

huawei_technologies_co.,huawei_hirouter-h1-10Match9.0.3.11

OR

huawei_technologies_co.,huawei_tc5200-10Match10.0.2.3

OR

huawei_technologies_co.,huawei_ws5100-10Match9.0.3.11

OR

huawei_technologies_co.,huawei_ws5102-10Match10.0.2.2

OR

huawei_technologies_co.,huawei_ws5106-10Match10.0.2.2

OR

huawei_technologies_co.,huawei_ws5108-10Match10.0.2.2

OR

huawei_technologies_co.,huawei_ws5200-11Match10.0.2.3

OR

huawei_technologies_co.,huawei_ws5200-11Match9.0.3.11

OR

huawei_technologies_co.,huawei_ws5280-10Match9.0.3.22

OR

huawei_technologies_co.,huawei_ws5280-11Match9.0.3.22

OR

huawei_technologies_co.,huawei_ws6500-10Match10.0.2.3

OR

huawei_technologies_co.,huawei_ws6500-11Match10.0.2.2

OR

huawei_technologies_co.,huawei_ws826-10Match9.0.3.11

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-5268
web	www.web.nvd.nist.gov/view/vuln/detail

08 Jan 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 35.5

CVSS 25.8

EPSS0.00382

Huawei routers input validation flaw arbitrary file access file upload vulnerable devices