ZeroHour

CVE-2019-5268

CVSS 3.1
8.1 high
EPSS
<1%p32
Published
()
Modified
Description

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Vendors
huawei
Products
cd10-10 firmware, cd16-10 firmware, cd17-10 firmware, cd18-10 firmware, hirouter-cd15-10 firmware, hirouter-cd20-10 firmware, hirouter-cd21-16 firmware, hirouter-cd30-10 firmware, hirouter-cd30-11 firmware, hirouter-h1-10 firmware, tc5200-10 firmware, ws5100-10 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.