high8.1
CVE-2019-5268
Some Huawei home routers have an input validation vulnerability.
Impact
Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Cd10-10 Firmware | from 10.0.2.2 before 10.0.2.7 |
| Huawei | Cd16-10 Firmware | from 10.0.2.3 before 10.0.2.5 |
| Huawei | Cd17-10 Firmware | from 9.0.3.3 before 10.0.2.5 |
| Huawei | Cd18-10 Firmware | from 9.0.2.23 before 10.0.2.5 |
| Huawei | Hirouter-Cd15-10 Firmware | from 9.0.2.3 before 10.0.2.5 |
| Huawei | Hirouter-Cd20-10 Firmware | from 9.0.3.9 before 10.0.2.6 |
| Huawei | Hirouter-Cd21-16 Firmware | from 9.0.3.9 before 10.0.2.5 |
| Huawei | Hirouter-Cd30-10 Firmware | from 10.0.2.8 before 10.0.2.9 |
| Huawei | Hirouter-Cd30-11 Firmware | from 10.0.2.8 before 10.0.2.9 |
| Huawei | Hirouter-H1-10 Firmware | from 9.0.3.11 before 10.0.2.5 |
| Huawei | Tc5200-10 Firmware | from 10.0.2.3 before 10.0.2.5 |
| Huawei | Ws5100-10 Firmware | from 9.0.3.11 before 10.0.2.7 |