Huawei Technologies Co., Ltd. vulnerabilities
343 vulnerabilities
Known vulnerabilities in Huawei Technologies Co., Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 209 products.
Products
50 of 209- Fusionsphere Openstack20 vulnerabilities
- Dp300; Rp200; Te30; Te40; Te50; TE6016 vulnerabilities
- UMA15 vulnerabilities
- Dp300,Rp200,Te30,Te40,Te50,Te6010 vulnerabilities
- Mate 9 Pro10 vulnerabilities
- Mate 99 vulnerabilities
- Honor 5C,Honor 6X6 vulnerabilities
- Ips,Module,Ngfw,Module,Nip6300,Nip6600,Secospace,Usg6300,Secospace,Usg6500,Secospace,Usg6600,Usg95006 vulnerabilities
- Nice AL006 vulnerabilities
- Ar120 S,Ar1200,Ar1200 S,Ar150,Ar150 S,Ar160,Ar200,Ar200 S,Ar2200,Ar2200 S,Ar3200,Ar3600,Ar510,Dp300,Max Presence,Netengine16Ex,Rp200,Srg1300,Srg2300,Srg3300,Te30,Te40,Te50,Te60,Tp3106,Tp32064 vulnerabilities
- Emily Al00A4 vulnerabilities
- Hedex Lite4 vulnerabilities
- Huawei P94 vulnerabilities
- Mate 10 Pro4 vulnerabilities
- P10, P10 Plus4 vulnerabilities
- P10 Plus,P104 vulnerabilities
- P9 Plus4 vulnerabilities
- 1288H V5; 2288H V53 vulnerabilities
- Ar32003 vulnerabilities
- Dp3003 vulnerabilities
- Dp300; Rp200; Rse6500; Te30; Te40; Te50; Te60; Tp3106; Tp3206; Viewpoint 9030; Espace U1960; Espace U19813 vulnerabilities
- Dp300,Rp200,Te30,Te40,Te50,Te60,Tx503 vulnerabilities
- Espace 79503 vulnerabilities
- Fusionsphere3 vulnerabilities
- Ireader3 vulnerabilities
- Mate 9, Mate 9 Pro3 vulnerabilities
- MAX Presence,Tp3106,Tp3206,3 vulnerabilities
- MHA Al00A3 vulnerabilities
- Rp2003 vulnerabilities
- TE303 vulnerabilities
- TE403 vulnerabilities
- TE503 vulnerabilities
- TE603 vulnerabilities
- Usg2205Bsr; Usg2220Bsr; Usg5120Bsr; Usg5150Bsr3 vulnerabilities
- Vcm50103 vulnerabilities
- ALP L092 vulnerabilities
- Ar120 S,Ar1200,Ar1200 S,Ar150,Ar150 S,Ar160,Ar200,Ar200 S,Ar2200,Ar2200 S,Ar3200,Ar510,Netengine16Ex,Smc2.0,Srg1300,Srg2300,Srg33002 vulnerabilities
- B2338 1682 vulnerabilities
- Cloudengine 128002 vulnerabilities
- Espace 7950; Espace 89502 vulnerabilities
- Honor 5S2 vulnerabilities
- Honor 6X2 vulnerabilities
- Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto2 vulnerabilities
- Honor 92 vulnerabilities
- Ibmc2 vulnerabilities
- LON Al00B2 vulnerabilities
- Mate 102 vulnerabilities
- P8 Lite,Mate 7,Mate S,P8,Honor 6,Honor 7,Shotx,G8,2 vulnerabilities
- P92 vulnerabilities
- S12700, S1700,S3700,S5700,S6700,S7700, S9700, Ecns210 TD2 vulnerabilities
CVE-2018-7956huawei technologies co., ltd.huawei vip app+4
EPSS score0.76%
Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.CVE-2018-7991huawei technologies co., ltd.mate10+1EPSS score0.24%
Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page.CVE-2018-7994huawei technologies co., ltd.ngfw module; nip6300; nip6600; nip6800; secospace usg6600; usg9500+7EPSS score0.96%
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.CVE-2018-7957huawei technologies co., ltd.victoria-al00+1EPSS score0.21%
Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.CVE-2018-7923huawei technologies co., ltd.alp-l09+1EPSS score1.01%
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.CVE-2018-7925huawei technologies co., ltd.emily-al00a+1EPSS score0.25%
The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability.CVE-2018-7901huawei technologies co., ltd.alp-al00b, bla-al00b+2EPSS score0.46%
RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with RCS for the first time, it needs user to manually click to agree. In addition, the attacker needs to obtain the key that RCS uses to authenticate the application. Successful exploitation may cause the attacker to control keyboard remotely.CVE-2018-7947huawei technologies co., ltd.emily-al00a+1EPSS score0.24%
Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause some malicious applications to be installed in the mobile phones.CVE-2018-7929huawei technologies co., ltd.mate rs+1EPSS score0.24%
Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations.CVE-2018-7960huawei technologies co., ltd.espace 7950+1EPSS score0.78%
There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.CVE-2018-7990huawei technologies co., ltd.mate10 pro+1EPSS score0.24%
Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP.CVE-2018-7958huawei technologies co., ltd.espace 7950+1EPSS score1.11%
There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.CVE-2018-7959huawei technologies co., ltd.espace 7950+1EPSS score0.78%
There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.CVE-2018-7903huawei technologies co., ltd.1288h v5; 2288h v5+2EPSS score1.11%
Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.CVE-2018-7987huawei technologies co., ltd.huawei p20+1EPSS score0.73%
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.CVE-2018-7921huawei technologies co., ltd.b315s-22+1EPSS score13.22%
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjacent attackers may exploit this vulnerability to obtain device information.CVE-2018-7944huawei technologies co., ltd.emily-al00a+1EPSS score0.30%
Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally.CVE-2018-7924huawei technologies co., ltd.anne-al00+1EPSS score0.23%
Anne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak vulnerability. Due to improper permission settings for specific commands, attackers who can connect to a mobile phone via the USB interface may exploit this vulnerability to obtain specific device information of the mobile phone.CVE-2018-7934huawei technologies co., ltd.mate 10 pro+1EPSS score0.56%
Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.CVE-2018-7922huawei technologies co., ltd.alp-l09+1EPSS score1.01%
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.