Huawei
Page 22 of 25 — Huawei CVEs from a corpus of 2402, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8123 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8122 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker… |
CVE-2017-8121 | Medium | 5.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8120 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8119 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-8118 | Low | 2.3 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information… |
CVE-2017-8117 | Critical | 9.8 | 2017-11-22 | The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters… |
CVE-2017-2739 | Low | 3.1 | 2017-11-22 | The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgra… |
CVE-2017-2738 | Critical | 9.8 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentic… |
CVE-2017-2737 | High | 8.8 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploa… |
CVE-2017-2736 | High | 7.2 | 2017-11-22 | VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input… |
CVE-2017-2735 | High | 7.1 | 2017-11-22 | TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system inter… |
CVE-2017-2734 | Medium | 5.5 | 2017-11-22 | P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into install… |
CVE-2017-2733 | Medium | 5.5 | 2017-11-22 | Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due t… |
CVE-2017-2732 | Medium | 5.5 | 2017-11-22 | Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious applicatio… |
CVE-2017-2731 | Medium | 5.5 | 2017-11-22 | The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into in… |
CVE-2017-2730 | Low | 3.5 | 2017-11-22 | HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vul… |
CVE-2017-2729 | High | 7.8 | 2017-11-22 | The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-… |
CVE-2017-2728 | Medium | 6.4 | 2017-11-22 | Some Huawei mobile phones Honor 6X Berlin-L22C636B150 and earlier versions have a Bluetooth unlock bypassing vulnerability. If a user has enabled the smart unl… |
CVE-2017-2727 | Medium | 4.3 | 2017-11-22 | Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365… |
CVE-2017-2726 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2725 | High | 7.8 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2724 | High | 8.4 | 2017-11-22 | Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulne… |
CVE-2017-2723 | Medium | 6.7 | 2017-11-22 | The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with t… |
CVE-2017-2722 | High | 8.8 | 2017-11-22 | DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPo… |
CVE-2017-2721 | Medium | 4.6 | 2017-11-22 | Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Be… |
CVE-2017-2720 | Medium | 5.3 | 2017-11-22 | FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certai… |
CVE-2017-2719 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-2718 | High | 8.8 | 2017-11-22 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one p… |
CVE-2017-2717 | Medium | 6.5 | 2017-11-22 | honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overf… |
CVE-2017-2716 | High | 7.8 | 2017-11-22 | The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious a… |
CVE-2017-2715 | High | 7.8 | 2017-11-22 | The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the S… |
CVE-2017-2714 | High | 8.0 | 2017-11-22 | The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can expl… |
CVE-2017-2713 | Medium | 5.4 | 2017-11-22 | HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370… |
CVE-2017-2712 | Medium | 5.3 | 2017-11-22 | S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may… |
CVE-2017-2711 | Medium | 5.5 | 2017-11-22 | P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can trick… |
CVE-2017-2710 | Medium | 4.6 | 2017-11-22 | BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than… |
CVE-2017-2709 | Medium | 5.5 | 2017-11-22 | HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into in… |
CVE-2017-2708 | Medium | 4.6 | 2017-11-22 | The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenti… |
CVE-2017-2707 | High | 7.1 | 2017-11-22 | Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into… |
CVE-2017-2706 | High | 7.1 | 2017-11-22 | Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name durin… |
CVE-2017-2705 | Low | 2.4 | 2017-11-22 | Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365… |
CVE-2017-2704 | High | 7.5 | 2017-11-22 | Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and ear… |
CVE-2017-2703 | Medium | 6.8 | 2017-11-22 | Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier bef… |
CVE-2017-2702 | Medium | 6.8 | 2017-11-22 | Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the pho… |
CVE-2017-2701 | Low | 3.3 | 2017-11-22 | Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the… |
CVE-2017-2700 | High | 7.5 | 2017-11-22 | AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes… |
CVE-2017-2699 | High | 7.8 | 2017-11-22 | The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege el… |
CVE-2017-2698 | High | 7.8 | 2017-11-22 | The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system ca… |
CVE-2017-2697 | High | 7.8 | 2017-11-22 | The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and ear… |
CVE-2017-2696 | High | 7.8 | 2017-11-22 | The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the ro… |
CVE-2017-2695 | Medium | 5.5 | 2017-11-22 | TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application. |
CVE-2017-2694 | Low | 3.3 | 2017-11-22 | The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An… |
CVE-2017-2693 | High | 7.8 | 2017-11-22 | ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B… |
CVE-2017-2692 | High | 7.8 | 2017-11-22 | The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and e… |
CVE-2017-2691 | Medium | 6.8 | 2017-11-22 | Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EV… |
CVE-2017-2690 | Medium | 5.5 | 2017-11-22 | SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace… |
CVE-2015-4422 | High | 7.0 | 2017-10-19 | The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a… |
CVE-2015-4421 | High | 7.5 | 2017-10-19 | The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service… |
CVE-2014-9697 | High | 7.5 | 2017-10-17 | Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switch… |
CVE-2015-7842 | High | 7.1 | 2017-10-10 | Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software be… |
CVE-2017-14491 | Critical | 9.8 | 2017-10-04 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS resp… |
CVE-2015-7843 | High | 8.8 | 2017-10-03 | The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC50… |
CVE-2015-7841 | Critical | 9.8 | 2017-10-03 | The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00S… |
CVE-2015-7846 | Medium | 4.6 | 2017-09-25 | Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF… |
CVE-2015-6592 | Medium | 6.8 | 2017-09-25 | Huawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell. |
CVE-2015-8224 | Low | 3.7 | 2017-09-20 | Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (… |
CVE-2015-4629 | Critical | 9.8 | 2017-09-07 | Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other… |
CVE-2015-8334 | High | 8.8 | 2017-08-29 | SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute… |
CVE-2015-8332 | High | 8.8 | 2017-08-28 | Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote auth… |
CVE-2015-2245 | High | 7.5 | 2017-06-27 | Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash). |
CVE-2017-3216 | Critical | 9.8 | 2017-06-20 | WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated a… |
CVE-2015-3913 | High | 7.5 | 2017-06-08 | The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message. |
CVE-2015-2800 | High | 7.5 | 2017-06-08 | The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with so… |
CVE-2015-2255 | Medium | 5.9 | 2017-06-08 | Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service (board reset) via vectors involving a large amoun… |
CVE-2015-2253 | Medium | 5.0 | 2017-06-08 | The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via… |
CVE-2015-2252 | High | 8.8 | 2017-06-08 | Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted U… |
CVE-2015-2251 | High | 7.5 | 2017-06-08 | The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a cra… |
CVE-2015-8089 | High | 7.8 | 2017-05-23 | The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users t… |
CVE-2015-6586 | High | 7.5 | 2017-05-23 | The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information… |
CVE-2015-8223 | Medium | 5.5 | 2017-04-13 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash)… |
CVE-2015-7740 | Medium | 5.5 | 2017-04-13 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash)… |
CVE-2016-8803 | High | 7.5 | 2017-04-02 | The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of… |
CVE-2016-8802 | Medium | 6.5 | 2017-04-02 | The security policy processing module in Huawei Secospace USG6300 with software V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200; Secospace USG6500 with… |
CVE-2016-8801 | High | 7.2 | 2017-04-02 | Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier versions allows attackers with administrator privilege to inject a command into a specific command's p… |
CVE-2016-8798 | High | 7.5 | 2017-04-02 | Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on… |
CVE-2016-8797 | High | 7.5 | 2017-04-02 | Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00… |
CVE-2016-8796 | High | 7.5 | 2017-04-02 | Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected… |
CVE-2016-8795 | Medium | 5.9 | 2017-04-02 | Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00… |
CVE-2016-8794 | High | 7.1 | 2017-04-02 | Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C… |
CVE-2016-8793 | Medium | 6.7 | 2017-04-02 | Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C… |
CVE-2016-8792 | High | 7.1 | 2017-04-02 | Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C… |
CVE-2016-8791 | High | 7.1 | 2017-04-02 | Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C… |
CVE-2016-8790 | Medium | 5.7 | 2017-04-02 | Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before… |
CVE-2016-8789 | Medium | 6.1 | 2017-04-02 | Huawei eSpace Integrated Access Device (IAD) with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a us… |
CVE-2016-8781 | Medium | 6.5 | 2017-04-02 | Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace USG6500 with software V500R001C20, Secospace USG6600 with software V500R… |
CVE-2016-8780 | Medium | 6.5 | 2017-04-02 | Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with… |
CVE-2016-8779 | Medium | 6.5 | 2017-04-02 | Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Pr… |
CVE-2016-8776 | Medium | 4.6 | 2017-04-02 | Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the facto… |
CVE-2016-8775 | Medium | 6.7 | 2017-04-02 | Touch Panel (TP) driver in Huawei NEM phones with software Versions before NEM-AL10C00B130, Versions before NEM-UL10C17B160, Versions before NEM-UL10C00B160, V… |