What’s Vulnerable › Vulnerabilities

CVE-2019-5300

• Severity: medium (CVSS 6.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-04 · updated 2026-06-17
• Weakness: CWE-347

Description

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

Affected products

• Huawei Ar1200-S Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar1200 Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar150 Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar160 Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar200 Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar2200 Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Ar2200S Firmware: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei AR3200: v200r007c00, v200r008c20, v200r008c50, v200r009c00, v200r010c00
• Huawei Srg1300 Firmware: v200r007c00, v200r008c50, v200r009c00, v200r010c00
• Huawei Srg2300 Firmware: v200r007c00, v200r008c50, v200r009c00, v200r010c00
• Huawei Srg3300 Firmware: v200r007c00, v200r008c50, v200r009c00, v200r010c00

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-ar-en

Get alerted when CVE-2019-5300 or the next vulnerability affects your stack