CVE-2019-5269: Huawei CD10-10 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege.

Affected products

  • Huawei CD10-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei CD16-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei CD17-10 Firmware: from 9.0.3.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei CD18-10 Firmware: from 9.0.2.23, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD15-10 Firmware: from 9.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD20-10 Firmware: from 9.0.3.9, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei Hirouter-CD21-16 Firmware: from 9.0.3.9, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei Hirouter-CD30-10 Firmware: from 10.0.2.8, before 10.0.2.9 (fixed in 10.0.2.9)
  • Huawei Hirouter-CD30-11 Firmware: from 10.0.2.8, before 10.0.2.9 (fixed in 10.0.2.9)
  • Huawei Hirouter-h1-10 Firmware: from 9.0.3.11, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei TC5200-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei WS5100-10 Firmware: from 9.0.3.11, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5102-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5106-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5108-10 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS5200-10 Firmware: from 9.0.3.9, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS5200-11 Firmware: version 9.0.3.11 only; version 10.0.2.3 only
  • Huawei WS5280-10 Firmware: from 9.0.3.22, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS5280-11 Firmware: from 9.0.3.22, before 10.0.2.6 (fixed in 10.0.2.6)
  • Huawei WS6500-10 Firmware: from 10.0.2.3, before 10.0.2.5 (fixed in 10.0.2.5)
  • Huawei WS6500-11 Firmware: from 10.0.2.2, before 10.0.2.7 (fixed in 10.0.2.7)
  • Huawei WS826-10 Firmware: from 9.0.3.11, before 10.0.2.5 (fixed in 10.0.2.5)

Published 2019-11-29. Last modified 2026-06-17.