PT-2019-4288 · Huawei · Huawei Home Routers

Published 2019-11-13 · Updated 2024-03-05 · CVE-2019-5269

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huawei home routers (affected versions not specified)

Description The issue is related to improper authorization in certain programs, allowing an attacker to execute malicious files and escalate privileges. This can lead to the execution of arbitrary code and privilege elevation.

Recommendations For affected Huawei home routers, consider restricting access to sensitive areas of the device until a proper fix is applied. As a temporary workaround, avoid using potentially vulnerable programs or features that may be exploited for privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2020-00003

CVE-2019-5269

Affected Products

Huawei Home Routers

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-5269 · Security Note
• https://bdu.fstec.ru/vul/2020-00003 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5269 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en · Vendor Advisory
• https://twitter.com/Esparta6108713/status/1765042834862920014 · Twitter Post
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191113-01-homerouter-en · Note