CVE-2019-5268: Huawei CD10-10 Firmware

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Affected products

  • Huawei CD10-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei CD16-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei CD17-10 Firmware: from 9.0.3.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei CD18-10 Firmware: from 9.0.2.23, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD15-10 Firmware: from 9.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD20-10 Firmware: from 9.0.3.9, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei Hirouter-CD21-16 Firmware: from 9.0.3.9, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD30-10 Firmware: from 10.0.2.8, before 10.0.2.9 (fixed in 10.0.2.9)
  • Huawei Hirouter-CD30-11 Firmware: from 10.0.2.8, before 10.0.2.9 (fixed in 10.0.2.9)
  • Huawei Hirouter-h1-10 Firmware: from 9.0.3.11, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei TC5200-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei WS5100-10 Firmware: from 9.0.3.11, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5102-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5106-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5108-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5200-10 Firmware: from 9.0.3.9, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS5200-11 Firmware: version 9.0.3.11 only; version 10.0.2.3 only
  • Huawei WS5280-10 Firmware: from 9.0.3.22, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS5280-11 Firmware: from 9.0.3.22, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS6500-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei WS6500-11 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS826-10 Firmware: from 9.0.3.11, before 10.0.2.5 (fixed in 10.0.2.5)

Published 2019-11-29. Last modified 2026-06-17.