Huawei
Page 15 of 20 — Huawei CVEs from a corpus of 1984, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22364 | Medium | 5.5 | 2021-05-27 | There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A mod… |
CVE-2021-22362 | Medium | 5.3 | 2021-05-27 | There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the… |
CVE-2021-22360 | Medium | 4.9 | 2021-05-27 | There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attac… |
CVE-2021-22359 | High | 7.5 | 2021-05-27 | There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerabi… |
CVE-2021-22358 | Medium | 4.3 | 2021-05-27 | There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulne… |
CVE-2021-22409 | Medium | 5.3 | 2021-05-20 | There is a denial of service vulnerability in some versions of ManageOne. There is a logic error in the implementation of a function of a module. When the serv… |
CVE-2021-22339 | Medium | 6.5 | 2021-05-20 | There is a denial of service vulnerability in some versions of ManageOne. In specific scenarios, due to the insufficient verification of the parameter, an atta… |
CVE-2021-22332 | High | 7.5 | 2021-04-28 | There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is… |
CVE-2021-22331 | High | 7.5 | 2021-04-28 | There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vuln… |
CVE-2021-22393 | High | 7.5 | 2021-04-28 | There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product… |
CVE-2021-22330 | Medium | 6.5 | 2021-04-28 | There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An unauthenticated at… |
CVE-2021-22327 | Medium | 6.5 | 2021-04-28 | There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, success… |
CVE-2021-22312 | Medium | 6.5 | 2021-04-08 | There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to th… |
CVE-2020-9149 | Medium | 5.5 | 2021-04-01 | An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify… |
CVE-2020-9148 | Medium | 5.5 | 2021-04-01 | An application bypass mechanism vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to delete us… |
CVE-2020-9147 | High | 7.8 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully construct… |
CVE-2020-9146 | Medium | 5.5 | 2021-04-01 | A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakag… |
CVE-2021-22321 | Medium | 5.3 | 2021-03-22 | There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vul… |
CVE-2021-22314 | High | 7.8 | 2021-03-22 | There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit… |
CVE-2021-22320 | High | 7.5 | 2021-03-22 | There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability… |
CVE-2021-22311 | High | 7.2 | 2021-03-22 | There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher pri… |
CVE-2021-22310 | Medium | 4.4 | 2021-03-22 | There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can ob… |
CVE-2021-22309 | High | 7.5 | 2021-03-22 | There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability b… |
CVE-2020-9213 | High | 7.5 | 2021-03-22 | There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft m… |
CVE-2020-9212 | Medium | 6.5 | 2021-03-22 | There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit… |
CVE-2020-9206 | Medium | 6.7 | 2021-03-22 | The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability… |
CVE-2021-22296 | Medium | 5.5 | 2021-03-02 | A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS o… |
CVE-2021-22294 | Low | 3.3 | 2021-03-02 | A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhaus… |
CVE-2021-22305 | Low | 3.3 | 2021-02-06 | There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can… |
CVE-2021-22304 | Low | 3.3 | 2021-02-06 | There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some… |
CVE-2021-22302 | High | 7.1 | 2021-02-06 | There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerabil… |
CVE-2021-22293 | High | 7.5 | 2021-02-06 | Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Af… |
CVE-2021-22292 | High | 7.5 | 2021-02-06 | There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a lar… |
CVE-2021-22299 | High | 7.8 | 2021-02-06 | There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vuln… |
CVE-2021-22298 | Medium | 6.5 | 2021-02-06 | There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulne… |
CVE-2020-9205 | Medium | 4.9 | 2021-02-06 | There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject… |
CVE-2020-9118 | Medium | 6.8 | 2021-02-06 | There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently… |
CVE-2021-22306 | Medium | 4.6 | 2021-02-06 | There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers c… |
CVE-2021-22303 | Low | 3.3 | 2021-02-06 | There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attacker… |
CVE-2021-22300 | Medium | 4.1 | 2021-02-06 | There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file c… |
CVE-2021-22307 | Medium | 5.5 | 2021-02-06 | There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attac… |
CVE-2021-22301 | Medium | 6.7 | 2021-02-06 | Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause b… |
CVE-2020-9209 | Medium | 6.7 | 2021-01-13 | There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory… |
CVE-2020-1866 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP… |
CVE-2020-1865 | Medium | 6.5 | 2021-01-13 | There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain P… |
CVE-2020-9203 | Low | 3.3 | 2021-01-13 | There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application t… |
CVE-2020-9143 | Medium | 5.3 | 2021-01-13 | There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information e… |
CVE-2020-9142 | Critical | 9.1 | 2021-01-13 | There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory o… |
CVE-2020-9141 | Critical | 9.1 | 2021-01-13 | There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosur… |
CVE-2020-9140 | Critical | 9.8 | 2021-01-13 | There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer o… |
CVE-2020-9139 | Critical | 9.1 | 2021-01-13 | There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial… |
CVE-2020-9138 | Medium | 5.3 | 2021-01-13 | There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exceptions during upd… |
CVE-2020-9145 | Critical | 9.1 | 2021-01-13 | There is an Out-of-bounds Write vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability may cause out-of-bounds access to the ph… |
CVE-2020-9144 | Critical | 9.8 | 2021-01-13 | There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction… |
CVE-2020-9223 | High | 7.5 | 2020-12-29 | There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may explo… |
CVE-2020-9208 | Medium | 6.5 | 2020-12-29 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the mo… |
CVE-2020-9207 | High | 7.8 | 2020-12-29 | There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product. A module does not verify the input file properly. Attackers c… |
CVE-2020-9125 | Medium | 6.7 | 2020-12-29 | There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission c… |
CVE-2020-9124 | High | 7.5 | 2020-12-29 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by send… |
CVE-2020-9094 | High | 7.5 | 2020-12-29 | There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers ca… |
CVE-2020-9093 | Medium | 5.5 | 2020-12-29 | There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a func… |
CVE-2020-1848 | Medium | 5.5 | 2020-12-29 | There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing… |
CVE-2020-9202 | Medium | 4.4 | 2020-12-24 | There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information… |
CVE-2020-9201 | Medium | 6.5 | 2020-12-24 | There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended b… |
CVE-2020-9200 | High | 7.8 | 2020-12-24 | There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through… |
CVE-2020-9137 | Medium | 6.7 | 2020-12-24 | There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient… |
CVE-2020-9120 | High | 7.5 | 2020-12-24 | CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages… |
CVE-2020-9119 | Medium | 6.2 | 2020-12-24 | There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and… |
CVE-2020-9247 | High | 7.8 | 2020-12-07 | There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed… |
CVE-2020-9117 | High | 7.8 | 2020-12-01 | HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write v… |
CVE-2020-9114 | High | 7.8 | 2020-12-01 | FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with c… |
CVE-2020-9116 | High | 7.2 | 2020-12-01 | Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit t… |
CVE-2020-9115 | High | 7.2 | 2020-12-01 | ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker w… |
CVE-2020-9129 | Medium | 6.7 | 2020-11-13 | HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers w… |
CVE-2020-9127 | Medium | 6.7 | 2020-11-13 | Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious co… |
CVE-2020-1847 | High | 7.5 | 2020-11-13 | There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthor… |
CVE-2020-9128 | Medium | 4.4 | 2020-11-12 | FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerability to cause infor… |
CVE-2020-9263 | High | 7.8 | 2020-10-19 | HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability… |
CVE-2020-9113 | High | 8.0 | 2020-10-19 | HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation… |
CVE-2020-9112 | High | 7.8 | 2020-10-19 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a privilege elevation vulnerability. Due to lack of privilege restrictions on some of the busin… |
CVE-2020-9111 | Medium | 4.5 | 2020-10-19 | E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP11C233) have a denial of service… |
CVE-2020-9092 | Medium | 4.6 | 2020-10-19 | HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could a… |
CVE-2020-9240 | Medium | 5.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. At… |
CVE-2020-9110 | Medium | 4.6 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an information disclosure vulnerability. The device does not sufficiently validate the output o… |
CVE-2020-9238 | Medium | 6.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. At… |
CVE-2020-9230 | Medium | 6.5 | 2020-10-12 | WS5800-10 version 10.0.3.25 has a denial of service vulnerability. Due to improper verification of specific message, an attacker may exploit this vulnerability… |
CVE-2020-9123 | High | 7.8 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulnerability. An attacke… |
CVE-2020-9122 | Medium | 6.5 | 2020-10-12 | Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on af… |
CVE-2020-9109 | Medium | 4.6 | 2020-10-12 | There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in cer… |
CVE-2020-9108 | Medium | 5.5 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed m… |
CVE-2020-9107 | Medium | 5.5 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed m… |
CVE-2020-9106 | Medium | 4.6 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, s… |
CVE-2020-9091 | Medium | 5.5 | 2020-10-12 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently… |
CVE-2020-9090 | High | 7.8 | 2020-10-12 | FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can ex… |
CVE-2020-9087 | Medium | 5.5 | 2020-10-12 | Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operat… |
CVE-2020-9105 | Medium | 6.7 | 2020-10-09 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect… |
CVE-2020-9084 | Medium | 6.5 | 2020-09-18 | Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific ope… |
CVE-2020-9239 | Medium | 5.5 | 2020-09-11 | Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than… |
CVE-2020-9235 | Medium | 5.5 | 2020-09-03 | Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E… |
CVE-2020-9083 | Low | 2.4 | 2020-09-03 | HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amo… |