What is the CVSS score of CVE-2019-5269?

CVE-2019-5269 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Cd10 10 Firmware CVE-2019-5269

HIGH

2019-11-29 psirt@huawei.com

Huawei Privilege Escalation Cd10 10 Firmware Cd16 10 Firmware Cd17 10 Firmware Cd18 10 Firmware Hirouter Cd15 10 Firmware Hirouter Cd20 10 Firmware Hirouter Cd21 16 Firmware Hirouter Cd30 10 Firmware Hirouter Cd30 11 Firmware Hirouter H1 10 Firmware Tc5200 10 Firmware Ws5100 10 Firmware Ws5102 10 Firmware Ws5106 10 Firmware Ws5108 10 Firmware Ws5200 10 Firmware Ws5200 11 Firmware Ws5280 10 Firmware Ws5280 11 Firmware Ws6500 10 Firmware Ws6500 11 Firmware Ws826 10 Firmware

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Nov 29, 2019 - 20:15 nvd

HIGH 7.8

DescriptionNVD

AnalysisAI

Some Huawei home routers have an improper authorization vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege. Affected products include: Huawei Cd10-10 Firmware, Huawei Cd16-10 Firmware, Huawei Cd17-10 Firmware, Huawei Cd18-10 Firmware, Huawei Hirouter-Cd15-10 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.