Auth bypass in Huawei Ap4050dn-E
CVE-2019-5298
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of commands.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (17.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 18th percentile — 17.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Huawei Ap4050dn-E — versions V200R009C00
- Huawei Ap4050dn-E Firmware
Weakness classification (CWE)
References
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20190327-01-ap-en (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-5298?
- CVE-2019-5298 is a medium-severity vulnerability in Huawei Ap4050dn-E, classified under Improper Authentication. CVSS score: 6.8/10. Published 2019-06-04.
- How severe is CVE-2019-5298?
- Medium severity. CVSS v3 base score is 6.8 out of 10.