high7.8
CVE-2019-5269
Some Huawei home routers have an improper authorization vulnerability.
Impact
Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Cd10-10 Firmware | from 10.0.2.2 before 10.0.2.7 |
| Huawei | Cd16-10 Firmware | from 10.0.2.3 before 10.0.2.5 |
| Huawei | Cd17-10 Firmware | from 9.0.3.3 before 10.0.2.5 |
| Huawei | Cd18-10 Firmware | from 9.0.2.23 before 10.0.2.5 |
| Huawei | Hirouter-Cd15-10 Firmware | from 9.0.2.3 before 10.0.2.5 |
| Huawei | Hirouter-Cd20-10 Firmware | from 9.0.3.9 before 10.0.2.6 |
| Huawei | Hirouter-Cd21-16 Firmware | from 9.0.3.9 before 10.0.2.5 |
| Huawei | Hirouter-Cd30-10 Firmware | from 10.0.2.8 before 10.0.2.9 |
| Huawei | Hirouter-Cd30-11 Firmware | from 10.0.2.8 before 10.0.2.9 |
| Huawei | Hirouter-H1-10 Firmware | from 9.0.3.11 before 10.0.2.5 |
| Huawei | Tc5200-10 Firmware | from 10.0.2.3 before 10.0.2.5 |
| Huawei | Ws5100-10 Firmware | from 9.0.3.11 before 10.0.2.7 |