Huawei WS5200-10 Firmware vulnerabilities

3 CVEs affecting Huawei WS5200-10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5268, published 2019-11-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7937, published 2018-09-04. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An…
CVE-2019-5268, published 2019-11-29. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to…
CVE-2019-5269, published 2019-11-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious…