Huawei
Page 14 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22452 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address. |
CVE-2021-22451 | High | 7.8 | 2021-10-28 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-22450 | Medium | 5.5 | 2021-10-28 | A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion. |
CVE-2021-22436 | Critical | 9.1 | 2021-10-28 | There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability. |
CVE-2021-22407 | Medium | 5.3 | 2021-10-28 | There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22406 | High | 7.5 | 2021-10-28 | There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly. |
CVE-2021-22405 | High | 7.5 | 2021-10-28 | There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability. |
CVE-2021-22404 | Medium | 5.3 | 2021-10-28 | There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22403 | Critical | 9.8 | 2021-10-28 | There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the… |
CVE-2021-22402 | High | 7.5 | 2021-10-28 | There is a DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS attacks. |
CVE-2021-22401 | High | 7.5 | 2021-10-28 | There is a Remote DoS vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity. |
CVE-2021-37131 | Medium | 6.8 | 2021-10-27 | There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability t… |
CVE-2021-37130 | High | 7.5 | 2021-10-27 | There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to construct a pathname th… |
CVE-2021-37129 | High | 7.5 | 2021-10-27 | There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify inpu… |
CVE-2021-37127 | High | 7.2 | 2021-10-27 | There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update p… |
CVE-2021-37124 | Medium | 6.5 | 2021-10-27 | There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file p… |
CVE-2021-37122 | Medium | 6.5 | 2021-10-27 | There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation… |
CVE-2021-37123 | Critical | 9.8 | 2021-10-11 | There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation… |
CVE-2021-37106 | High | 7.2 | 2021-09-28 | There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. T… |
CVE-2021-37105 | High | 7.5 | 2021-09-28 | There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and doe… |
CVE-2021-37104 | High | 7.5 | 2021-09-28 | There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of pa… |
CVE-2021-37101 | Medium | 6.8 | 2021-09-09 | There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an atta… |
CVE-2021-22449 | High | 7.5 | 2021-08-23 | There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insu… |
CVE-2021-22357 | High | 7.5 | 2021-08-23 | There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. Attackers c… |
CVE-2021-22328 | High | 7.5 | 2021-08-23 | There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft t… |
CVE-2021-37028 | Medium | 6.7 | 2021-08-13 | There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default, attackers with adm… |
CVE-2021-22386 | High | 7.0 | 2021-08-10 | A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges. |
CVE-2021-22385 | High | 7.8 | 2021-08-10 | A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to… |
CVE-2021-22295 | Medium | 5.5 | 2021-08-06 | A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page… |
CVE-2021-22425 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges. |
CVE-2021-22424 | Medium | 5.5 | 2021-08-03 | A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service. |
CVE-2021-22423 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow. |
CVE-2021-22422 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-22421 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Pr… |
CVE-2021-22420 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause t… |
CVE-2021-22419 | Medium | 5.5 | 2021-08-03 | A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persis… |
CVE-2021-22418 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting. |
CVE-2021-22417 | Medium | 5.5 | 2021-08-03 | A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage. |
CVE-2021-22416 | High | 7.8 | 2021-08-03 | A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution. |
CVE-2021-22400 | Medium | 5.5 | 2021-08-03 | Some Huawei Smartphones has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installin… |
CVE-2021-22447 | High | 7.5 | 2021-08-02 | There is an Improper Check for Unusual or Exceptional Conditions Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the… |
CVE-2021-22446 | High | 7.5 | 2021-08-02 | There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22445 | High | 7.5 | 2021-08-02 | There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22444 | Critical | 9.8 | 2021-08-02 | There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection. |
CVE-2021-22443 | High | 7.5 | 2021-08-02 | There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random address access. |
CVE-2021-22442 | High | 7.5 | 2021-08-02 | There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system… |
CVE-2021-22438 | Critical | 9.8 | 2021-08-02 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to… |
CVE-2021-22435 | Critical | 9.1 | 2021-08-02 | There is a Configuration Defect Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability. |
CVE-2021-22428 | High | 8.1 | 2021-08-02 | There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22427 | High | 8.1 | 2021-08-02 | There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22415 | High | 7.5 | 2021-08-02 | There is an Incorrect Calculation of Buffer Size Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause kernel exceptions w… |
CVE-2021-22414 | High | 7.5 | 2021-08-02 | There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22413 | High | 7.5 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22412 | High | 7.5 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access. |
CVE-2021-22398 | Medium | 4.6 | 2021-08-02 | There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on… |
CVE-2021-22397 | Medium | 6.7 | 2021-08-02 | There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when they are be called. At… |
CVE-2021-22396 | High | 7.8 | 2021-08-02 | There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access… |
CVE-2021-22392 | High | 7.5 | 2021-08-02 | There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and direction… |
CVE-2021-22391 | High | 7.5 | 2021-08-02 | There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset. |
CVE-2021-22390 | Critical | 9.8 | 2021-08-02 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to b… |
CVE-2021-22389 | Critical | 9.8 | 2021-08-02 | There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. |
CVE-2021-22388 | Critical | 9.8 | 2021-08-02 | There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed. |
CVE-2021-22387 | Critical | 9.8 | 2021-08-02 | There is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow… |
CVE-2021-22384 | High | 8.1 | 2021-08-02 | There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22381 | High | 7.5 | 2021-08-02 | There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause an infinite loop in DoS. |
CVE-2021-22379 | High | 7.5 | 2021-08-02 | There is an Integer Underflow (Wrap or Wraparound) Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause DoS of Samgr. |
CVE-2021-22318 | Medium | 5.5 | 2021-07-14 | A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service. |
CVE-2021-22440 | Medium | 4.6 | 2021-07-13 | There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that… |
CVE-2021-22399 | Medium | 5.5 | 2021-07-13 | The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Blue… |
CVE-2021-22344 | Medium | 5.3 | 2021-07-01 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoS. |
CVE-2021-22343 | Critical | 9.1 | 2021-07-01 | There is a Configuration Defect vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integrity and availability. |
CVE-2020-9158 | High | 7.5 | 2021-07-01 | There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr. |
CVE-2021-22347 | Medium | 5.3 | 2021-07-01 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoS. |
CVE-2021-22345 | Critical | 9.8 | 2021-06-30 | There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds memory write. |
CVE-2021-22352 | High | 7.8 | 2021-06-30 | There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and… |
CVE-2021-22351 | High | 8.1 | 2021-06-30 | There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may induce users to grant permission… |
CVE-2021-22350 | High | 7.5 | 2021-06-30 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause the device to cra… |
CVE-2021-22349 | High | 7.5 | 2021-06-30 | There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart. |
CVE-2021-22348 | Critical | 9.8 | 2021-06-30 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute. |
CVE-2021-22346 | Medium | 5.3 | 2021-06-30 | There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to the disclosure of user… |
CVE-2021-22368 | High | 7.5 | 2021-06-30 | There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect normal use of the device. |
CVE-2021-22367 | Critical | 9.8 | 2021-06-30 | There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22354 | Critical | 9.1 | 2021-06-30 | There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds read. |
CVE-2021-22353 | High | 7.5 | 2021-06-30 | There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause the kernel to res… |
CVE-2021-22374 | High | 7.5 | 2021-06-30 | There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks. |
CVE-2021-22373 | Critical | 9.1 | 2021-06-30 | There is a Defects Introduced in the Design Process Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service integr… |
CVE-2021-22371 | High | 7.5 | 2021-06-30 | There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22369 | High | 8.1 | 2021-06-30 | There is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate… |
CVE-2021-22323 | Critical | 9.8 | 2021-06-30 | There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that of the ro… |
CVE-2021-22380 | Critical | 9.1 | 2021-06-30 | There is a Cleartext Transmission of Sensitive Information Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service… |
CVE-2021-22376 | High | 8.4 | 2021-06-30 | A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to bypass user restrictions. |
CVE-2021-22375 | Critical | 9.8 | 2021-06-30 | There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availabil… |
CVE-2021-22372 | High | 7.5 | 2021-06-30 | There is a Security Features Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22370 | High | 7.5 | 2021-06-30 | There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2021-22326 | High | 7.1 | 2021-06-30 | A component of the HarmonyOS has a Privilege Dropping / Lowering Errors vulnerability. Local attackers may exploit this vulnerability to obtain Kernel space re… |
CVE-2021-22341 | Medium | 4.9 | 2021-06-29 | There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vuln… |
CVE-2021-22329 | Medium | 4.9 | 2021-06-29 | There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulne… |
CVE-2021-22439 | High | 8.1 | 2021-06-29 | There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfu… |
CVE-2021-22340 | Medium | 4.1 | 2021-06-29 | There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker wi… |
CVE-2021-22338 | Medium | 5.3 | 2021-06-29 | There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attack… |