{"id":"CVE-2019-5268","aliases":["EUVD-2019-14873","GHSA-2wp7-476w-v7fh"],"status":"published","title":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not...","description":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00382,"percentile":0.32496,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-11-29T20:01:51Z","modified":"2026-06-17T02:37:24Z","products":[{"vendor":"huawei","product":"cd10-10_firmware"},{"vendor":"huawei","product":"cd16-10_firmware"},{"vendor":"huawei","product":"cd17-10_firmware"},{"vendor":"huawei","product":"cd18-10_firmware"},{"vendor":"huawei","product":"hirouter-cd15-10_firmware"},{"vendor":"huawei","product":"hirouter-cd20-10_firmware"},{"vendor":"huawei","product":"hirouter-cd21-16_firmware"},{"vendor":"huawei","product":"hirouter-cd30-10_firmware"},{"vendor":"huawei","product":"hirouter-cd30-11_firmware"},{"vendor":"huawei","product":"hirouter-h1-10_firmware"},{"vendor":"huawei","product":"tc5200-10_firmware"},{"vendor":"huawei","product":"ws5100-10_firmware"},{"vendor":"huawei","product":"ws5102-10_firmware"},{"vendor":"huawei","product":"ws5106-10_firmware"},{"vendor":"huawei","product":"ws5108-10_firmware"},{"vendor":"huawei","product":"ws5200-10_firmware"},{"vendor":"huawei","product":"ws5200-11_firmware"},{"vendor":"huawei","product":"ws5280-10_firmware"},{"vendor":"huawei","product":"ws5280-11_firmware"},{"vendor":"huawei","product":"ws6500-10_firmware"},{"vendor":"huawei","product":"ws6500-11_firmware"},{"vendor":"huawei","product":"ws826-10_firmware"}],"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5268"},{"url":"https://github.com/advisories/GHSA-2wp7-476w-v7fh"}],"sources":{"cve":[{"id":"CVE-2019-5268","description":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.","status":"published","published":"2019-11-29T20:01:51Z","modified":"2024-08-04T19:47:56.841Z","updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2019-14873","description":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.","status":"published","published":"2019-11-29T20:01:51Z","modified":"2024-08-04T19:47:56Z","updated_at":"2026-11-03T03:06:52.999682Z"}],"ghsa":[{"id":"GHSA-2wp7-476w-v7fh","title":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not...","description":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.","status":"published","published":"2022-05-24T17:02:31Z","modified":"2023-01-28T05:07:51Z","updated_at":"2026-11-02T14:44:35.015986Z"}],"nvd":[{"id":"CVE-2019-5268","description":"Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.","status":"published","published":"2019-11-29T21:15:11.387Z","modified":"2026-06-17T02:37:24.603Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":4.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:38.993437Z"}]}}