Huawei
Page 15 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22383 | Medium | 4.9 | 2021-06-22 | There is an out-of-bounds read vulnerability in eCNS280_TD V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerabil… |
CVE-2021-22382 | Medium | 6.5 | 2021-06-22 | Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to inst… |
CVE-2021-22378 | Medium | 5.3 | 2021-06-22 | There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by ano… |
CVE-2021-22377 | High | 7.2 | 2021-06-22 | There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V20… |
CVE-2021-22363 | High | 7.5 | 2021-06-22 | There is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker needs to perform specific operations to exploit the vulnerabili… |
CVE-2021-22342 | Medium | 4.9 | 2021-06-22 | There is an information leak vulnerability in Huawei products. A module does not deal with specific input sufficiently. High privilege attackers can exploit th… |
CVE-2021-22366 | Medium | 5.5 | 2021-06-22 | There is an out-of-bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. The vulnerability is due to a function th… |
CVE-2021-22365 | Low | 3.3 | 2021-06-22 | There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnera… |
CVE-2021-22361 | High | 7.8 | 2021-06-22 | There is an improper authorization vulnerability in eCNS280 V100R005C00, V100R005C10 and eSE620X vESS V100R001C10SPC200, V100R001C20SPC200. A file access is no… |
CVE-2021-22337 | Medium | 5.3 | 2021-06-03 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data. |
CVE-2021-22335 | High | 7.8 | 2021-06-03 | There is a Memory Buffer Improper Operation Limit vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause exceptions in ima… |
CVE-2021-22334 | High | 7.4 | 2021-06-03 | There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirections. |
CVE-2021-22333 | Critical | 9.8 | 2021-06-03 | There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thu… |
CVE-2021-22336 | High | 7.5 | 2021-06-03 | There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of securi… |
CVE-2021-22325 | Medium | 5.3 | 2021-06-03 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video streams being intercep… |
CVE-2021-22324 | High | 7.5 | 2021-06-03 | There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. |
CVE-2021-22322 | High | 7.5 | 2021-06-03 | There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confi… |
CVE-2021-22317 | High | 7.5 | 2021-06-03 | There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. |
CVE-2021-22316 | Medium | 6.8 | 2021-06-03 | There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit th… |
CVE-2021-22313 | High | 7.5 | 2021-06-03 | There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality. |
CVE-2021-22308 | Low | 3.3 | 2021-06-03 | There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background… |
CVE-2021-22411 | Medium | 6.5 | 2021-05-27 | There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability… |
CVE-2021-22364 | Medium | 5.5 | 2021-05-27 | There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A mod… |
CVE-2021-22362 | Medium | 5.3 | 2021-05-27 | There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the… |
CVE-2021-22360 | Medium | 4.9 | 2021-05-27 | There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attac… |
CVE-2021-22359 | High | 7.5 | 2021-05-27 | There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerabi… |
CVE-2021-22358 | Medium | 4.3 | 2021-05-27 | There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulne… |
CVE-2021-22409 | Medium | 5.3 | 2021-05-20 | There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the serv… |
CVE-2021-22339 | Medium | 6.5 | 2021-05-20 | There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an atta… |
CVE-2021-22332 | High | 7.5 | 2021-04-28 | There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is… |
CVE-2021-22331 | High | 7.5 | 2021-04-28 | There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vuln… |
CVE-2021-22393 | High | 7.5 | 2021-04-28 | There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product… |
CVE-2021-22330 | Medium | 6.5 | 2021-04-28 | There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An unauthenticated at… |
CVE-2021-22327 | Medium | 6.5 | 2021-04-28 | There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, success… |
CVE-2021-22312 | Medium | 6.5 | 2021-04-08 | There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to th… |
CVE-2020-9149 | Medium | 5.5 | 2021-04-01 | An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify… |
CVE-2020-9148 | Medium | 5.5 | 2021-04-01 | An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete us… |
CVE-2020-9147 | High | 7.8 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully construct… |
CVE-2020-9146 | Medium | 5.5 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakag… |
CVE-2021-22321 | Medium | 5.3 | 2021-03-22 | There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vul… |
CVE-2021-22314 | High | 7.8 | 2021-03-22 | There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit… |
CVE-2021-22320 | High | 7.5 | 2021-03-22 | There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability… |
CVE-2021-22311 | High | 7.2 | 2021-03-22 | There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher pri… |
CVE-2021-22310 | Medium | 4.4 | 2021-03-22 | There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can ob… |
CVE-2021-22309 | High | 7.5 | 2021-03-22 | There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability b… |
CVE-2020-9213 | High | 7.5 | 2021-03-22 | There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft m… |
CVE-2020-9212 | Medium | 6.5 | 2021-03-22 | There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit… |
CVE-2020-9206 | Medium | 6.7 | 2021-03-22 | The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability… |
CVE-2021-22296 | Medium | 5.5 | 2021-03-02 | A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS o… |
CVE-2021-22294 | Low | 3.3 | 2021-03-02 | A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhaus… |
CVE-2021-22305 | Low | 3.3 | 2021-02-06 | There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can… |
CVE-2021-22304 | Low | 3.3 | 2021-02-06 | There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some… |
CVE-2021-22302 | High | 7.1 | 2021-02-06 | There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerabil… |
CVE-2021-22293 | High | 7.5 | 2021-02-06 | Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Af… |
CVE-2021-22292 | High | 7.5 | 2021-02-06 | There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a lar… |
CVE-2021-22299 | High | 7.8 | 2021-02-06 | There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vuln… |
CVE-2021-22298 | Medium | 6.5 | 2021-02-06 | There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulne… |
CVE-2020-9205 | Medium | 4.9 | 2021-02-06 | There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject… |
CVE-2020-9118 | Medium | 6.8 | 2021-02-06 | There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently… |
CVE-2021-22306 | Medium | 4.6 | 2021-02-06 | There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers c… |
CVE-2021-22303 | Low | 3.3 | 2021-02-06 | There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attacker… |
CVE-2021-22300 | Medium | 4.1 | 2021-02-06 | There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file c… |
CVE-2021-22307 | Medium | 5.5 | 2021-02-06 | There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attac… |
CVE-2021-22301 | Medium | 6.7 | 2021-02-06 | Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause b… |
CVE-2020-9209 | Medium | 6.7 | 2021-01-13 | There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory… |
CVE-2020-1866 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP… |
CVE-2020-1865 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain P… |
CVE-2020-9203 | Low | 3.3 | 2021-01-13 | There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application t… |
CVE-2020-9143 | Medium | 5.3 | 2021-01-13 | There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information e… |
CVE-2020-9142 | Critical | 9.1 | 2021-01-13 | There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory o… |
CVE-2020-9141 | Critical | 9.1 | 2021-01-13 | There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosur… |
CVE-2020-9140 | Critical | 9.8 | 2021-01-13 | There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer o… |
CVE-2020-9139 | Critical | 9.1 | 2021-01-13 | There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial… |
CVE-2020-9138 | Medium | 5.3 | 2021-01-13 | There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exceptions during upd… |
CVE-2020-9145 | Critical | 9.1 | 2021-01-13 | There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability may cause out-of-bounds access to the ph… |
CVE-2020-9144 | Critical | 9.8 | 2021-01-13 | There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction… |
CVE-2020-9223 | High | 7.5 | 2020-12-29 | There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may explo… |
CVE-2020-9208 | Medium | 6.5 | 2020-12-29 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the mo… |
CVE-2020-9207 | High | 7.8 | 2020-12-29 | There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers c… |
CVE-2020-9125 | Medium | 6.7 | 2020-12-29 | There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission c… |
CVE-2020-9124 | High | 7.5 | 2020-12-29 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by send… |
CVE-2020-9094 | High | 7.5 | 2020-12-29 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers ca… |
CVE-2020-9093 | Medium | 5.5 | 2020-12-29 | There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a func… |
CVE-2020-1848 | Medium | 5.5 | 2020-12-29 | There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing… |
CVE-2020-9202 | Medium | 4.4 | 2020-12-24 | There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information… |
CVE-2020-9201 | Medium | 6.5 | 2020-12-24 | There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended b… |
CVE-2020-9200 | High | 7.8 | 2020-12-24 | There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through… |
CVE-2020-9137 | Medium | 6.7 | 2020-12-24 | There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient… |
CVE-2020-9120 | High | 7.5 | 2020-12-24 | CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages… |
CVE-2020-9119 | Medium | 6.2 | 2020-12-24 | There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and… |
CVE-2020-9247 | High | 7.8 | 2020-12-07 | There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed… |
CVE-2020-9117 | High | 7.8 | 2020-12-01 | HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write v… |
CVE-2020-9114 | High | 7.8 | 2020-12-01 | FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with c… |
CVE-2020-9116 | High | 7.2 | 2020-12-01 | Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit t… |
CVE-2020-9115 | High | 7.2 | 2020-12-01 | ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker w… |
CVE-2020-9129 | Medium | 6.7 | 2020-11-13 | HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers w… |
CVE-2020-9127 | Medium | 6.7 | 2020-11-13 | Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious co… |
CVE-2020-1847 | High | 7.5 | 2020-11-13 | There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthor… |
CVE-2020-9128 | Medium | 4.4 | 2020-11-12 | FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerability to cause infor… |
CVE-2020-9263 | High | 7.8 | 2020-10-19 | HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability… |