What is the CVSS score of CVE-2019-5268?

CVE-2019-5268 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.4%.

Cd10 10 Firmware CVE-2019-5268

HIGH

Improper Input Validation (CWE-20)

2019-11-29 psirt@huawei.com

Huawei Information Disclosure Cd10 10 Firmware Cd16 10 Firmware Cd17 10 Firmware Cd18 10 Firmware Hirouter Cd15 10 Firmware Hirouter Cd20 10 Firmware Hirouter Cd21 16 Firmware Hirouter Cd30 10 Firmware Hirouter Cd30 11 Firmware Hirouter H1 10 Firmware Tc5200 10 Firmware Ws5100 10 Firmware Ws5102 10 Firmware Ws5106 10 Firmware Ws5108 10 Firmware Ws5200 10 Firmware Ws5200 11 Firmware Ws5280 10 Firmware Ws5280 11 Firmware Ws6500 10 Firmware Ws6500 11 Firmware Ws826 10 Firmware

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Nov 29, 2019 - 21:15 nvd

HIGH 8.1

DescriptionNVD

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

AnalysisAI

Some Huawei home routers have an input validation vulnerability. Rated high severity (CVSS 8.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories. Affected products include: Huawei Cd10-10 Firmware, Huawei Cd16-10 Firmware, Huawei Cd17-10 Firmware, Huawei Cd18-10 Firmware, Huawei Hirouter-Cd15-10 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.