PT-2019-4288 · Huawei · Huawei Home Routers

CVE-2019-5269 · Publicado 2019-11-13 · Atualizado 2024-03-05

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei home routers (affected versions not specified)

Description The issue is related to improper authorization in certain programs, allowing an attacker to execute malicious files and escalate privileges. This can lead to the execution of arbitrary code and privilege elevation.

Recommendations For affected Huawei home routers, consider restricting access to sensitive areas of the device until a proper fix is applied. As a temporary workaround, avoid using potentially vulnerable programs or features that may be exploited for privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BDU:2020-00003

CVE-2019-5269

Produtos afetados

Huawei Home Routers

Referências · 6

• https://twitter.com/Esparta6108713/status/1765042834862920014 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2019-5269 · Nota de Segurança
• https://bdu.fstec.ru/vul/2020-00003 · Nota de Segurança
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en · Nota
• https://osv.dev/vulnerability/CVE-2019-5269 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en · Aviso do Fabricante