← Vulnerability feed

Vulnerability record · CVE-2019-5269 · published 29 November 2019

CVE-2019-5269: Huawei cd10-10 firmware vulnerability

Huawei · Cd10 10 Firmware

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege.

7.8 CVSS 3.1 High EPSS 0.22% · top 88.5%
7.8CVSS 3.1 base score, v2 4.6
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
22Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

22 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en Vendor Advisory

Track CVE-2019-5269 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2019-5268Huawei cd10-10 firmware improper input validation vulnerabilitySome Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulne…EPSS 0.38%6.5CVE-2020-9069Huawei anne-al00 firmware vulnerabilityThere is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decr…EPSS 0.34%

Source: NIST National Vulnerability Database (record CVE-2019-5269), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.