CVE-2019-5300: Huawei AR1200-S Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Affected products

  • Huawei AR1200-S Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR1200 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR150 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR160 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR200 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR2200 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR2200S Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei AR3200 Firmware: version v200r007c00 only; version v200r008c20 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei SRG1300 Firmware: version v200r007c00 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei SRG2300 Firmware: version v200r007c00 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only
  • Huawei SRG3300 Firmware: version v200r007c00 only; version v200r008c50 only; version v200r009c00 only; version v200r010c00 only

Published 2019-06-04. Last modified 2026-06-17.