CVE-2025-49599

MEDIUM

Huawei EG8141A5 <V5R019C00S100 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3.

References (1)

Core 1
Core References

Scores

CVSS v3 4.1
EPSS 0.0004
EPSS Percentile 12.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-863
Status published
Products (3)
Huawei/EG8141A5 < V5R019C00S100
Huawei/EG8145V5 < V5R019C00S100
Huawei/EG8145V5-V2 < V5R021C00S184
Published Jun 06, 2025
Tracked Since Feb 18, 2026