VULNERABILITY INTELLIGENCE
CVE-2019-5268
CVSS score8.1 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2019-11-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory