Huawei vulnerabilities, page 4
2,404 vulnerabilities
Known vulnerabilities in Huawei products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,105 products.
CVE-2013-4631huaweiar_1200+4
EPSS score3.82%
Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service (device crash) via malformed SNMPv3 requests that leverage unspecified overflow issues.CVE-2013-4629huaweivp_9610+1EPSS score1.06%
The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method.CVE-2013-4630huaweiar_1200+4EPSS score3.91%
Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute arbitrary code via malformed SNMPv3 requests.CVE-2013-4633huaweiseco_versatile_security_managerEPSS score1.21%
Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting.CVE-2013-6031huaweie355_firmwareEPSS score6.08%
The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to change passwords and settings, or obtain sensitive information, via a direct request to (1) api/wlan/security-settings, (2) api/device/information, (3) api/wlan/basic-settings, (4) api/wlan/mac-filter, (5) api/monitoring/status, or (6) api/dhcp/settings.CVE-2013-6786allegrosoftrompager+6EPSS score2.17%
Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote attackers to inject arbitrary web script or HTML by requesting a nonexistent URI in conjunction with a crafted HTTP Referer header that is not properly handled in a 404 page. NOTE: there is no CVE for a "URL redirection" issue that some sources list separately.CVE-2021-40004huaweiharmonyosEPSS score0.64%
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40053huaweiemui+2EPSS score0.71%
There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.CVE-2021-40007huaweiecns280_td_firmwareEPSS score0.56%
There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure.CVE-2021-40017huaweiemui+1EPSS score0.65%
The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.CVE-2021-40010huaweiemui+2EPSS score1.22%
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.CVE-2021-40029huaweiemui+2EPSS score0.79%
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.CVE-2021-40059huaweiemui+1EPSS score0.27%
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-40030huaweiemui+2EPSS score0.54%
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-40001huaweiharmonyosEPSS score0.76%
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be unavailable.CVE-2021-40016huaweiemui+1EPSS score0.27%
Improper permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-40060huaweiemui+1EPSS score0.75%
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.CVE-2021-40011huaweiemui+2EPSS score0.78%
There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-40023huaweiemuiEPSS score0.53%
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.CVE-2021-40061huaweiemui+2EPSS score0.63%
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.