ByteOS

cpe:2.3:o:huawei:ar3200_firmware:v200r001c00:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r001c00

cpe:2.3:o:huawei:ar3200_firmware:v200r001c01:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r001c01

cpe:2.3:o:huawei:ar3200_firmware:v200r002c00:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r002c00

cpe:2.3:o:huawei:ar3200_firmware:v200r002c01:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r002c01

cpe:2.3:o:huawei:ar3200_firmware:v200r002c02:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r002c02

cpe:2.3:o:huawei:ar3200_firmware:v200r002c05:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r002c05

cpe:2.3:o:huawei:ar3200_firmware:v200r003c00:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r003c00

cpe:2.3:o:huawei:ar3200_firmware:v200r003c01:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r003c01

cpe:2.3:o:huawei:ar3200_firmware:v200r003c05:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r003c05

cpe:2.3:o:huawei:ar3200_firmware:v200r005c00:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c00

cpe:2.3:o:huawei:ar3200_firmware:v200r005c10:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c10

cpe:2.3:o:huawei:ar3200_firmware:v200r005c20:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c20

cpe:2.3:o:huawei:ar3200_firmware:v200r005c21:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c21

cpe:2.3:o:huawei:ar3200_firmware:v200r005c30:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c30

cpe:2.3:o:huawei:ar3200_firmware:v200r005c31:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c31

cpe:2.3:o:huawei:ar3200_firmware:v200r005c32:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r005c32

cpe:2.3:o:huawei:ar3200_firmware:v200r006c00:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c00

cpe:2.3:o:huawei:ar3200_firmware:v200r006c10:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c10

cpe:2.3:o:huawei:ar3200_firmware:v200r006c11:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c11

cpe:2.3:o:huawei:ar3200_firmware:v200r006c12:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c12

cpe:2.3:o:huawei:ar3200_firmware:v200r006c13:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c13

cpe:2.3:o:huawei:ar3200_firmware:v200r006c15:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c15

cpe:2.3:o:huawei:ar3200_firmware:v200r006c16:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c16

cpe:2.3:o:huawei:ar3200_firmware:v200r006c17:*:*:*:*:*:*:*

>>ar3200_firmware>>v200r006c17

cpe:2.3:h:huawei:ar3200:-:*:*:*:*:*:*:*

>>ar3200>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-router-en	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/91774	cve@mitre.org	Third Party Advisory VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-router-en	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/91774	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-router-en

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/91774

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160713-01-router-en

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/91774

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Similar CVEs

832Records found

CVE-2023-39386

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:20

Updated-10 Oct, 2024 | 14:35

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2023-37241

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-06 Jul, 2023 | 12:30

Updated-19 Nov, 2024 | 17:02

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37081

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.18% / 40.11%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:04

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37039

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.05% / 15.94%

7 Day CHG~0.00%

Published-08 Dec, 2021 | 14:11

Updated-04 Aug, 2024 | 01:09

There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

Product-magic_ui harmonyos emui Magic UI HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37017

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:24

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37024

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:26

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37060

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39404

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:41

Updated-09 Oct, 2024 | 16:22

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37025

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:25

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37004

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:25

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39390

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:24

Updated-10 Oct, 2024 | 14:35

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39381

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:41

Updated-10 Oct, 2024 | 15:35

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37008

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:22

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39405

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.10% / 29.00%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:37

Updated-10 Oct, 2024 | 14:25

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-37005

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:24

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37096

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:06

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.

Product-harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37003

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:23

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37048

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.49%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37026

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.89%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:23

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-3456

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.09% / 25.82%

7 Day CHG~0.00%

Published-06 Jul, 2023 | 12:34

Updated-21 Nov, 2024 | 14:12

Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2016-8762

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5||MEDIUM

EPSS-0.03% / 5.87%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.

Product-p9_lite_firmware p9_lite p8_lite p9_firmware p8_lite_firmware p9 P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8756

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.30%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart).

Product-mate_8 mate_8_firmware Mate8 NXT-AL10C00B197 and earlier versions,NXT-DL10C00B197 and earlier versions,NXT-TL10C00B197 and earlier versions,NXT-CL10C00B197 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8796

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.59%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition.

Product-usg9580 usg9520 usg9560_firmware usg9560 usg9520_firmware usg9580_firmware USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8758

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.30%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).

Product-mate_8 mate_8_firmware Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561 and earlier versions,NXT-DL10C00B561 and earlier versions,NXT-TL10C00B561 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8278

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.27% / 50.19%

7 Day CHG~0.00%

Published-03 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.

Product-usg9520 usg9560 usg9580 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-6824

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.20% / 41.98%

7 Day CHG~0.00%

Published-22 Sep, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets.

Product-ac6005 ac6605 ac6003_firmware ac6605_firmware ac6003 ac6005_firmware acu2 acu2_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8273

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.09%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

Product-hisuite HiSuite 4.0.5.300_OVE

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-284

Improper Access Control

CVE-2016-6901

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 46.00%

7 Day CHG~0.00%

Published-26 Sep, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of service via format string specifiers in vectors involving partial commands.

Product-ar550 ar500 ar120 ar_firmware ar200 ar1200 ar150 netengine_16ex_firmware ar2500 netengine_16ex ar3600 ar3200 ar100 ar2200 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8277

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 46.00%

7 Day CHG~0.00%

Published-03 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter.

Product-usg9520 usg9560 usg9580 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8275

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 46.04%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.

Product-anyoffice AnyOffice V200R006C00

CWE ID-CWE-20

Improper Input Validation

CVE-2016-4087

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.83% / 73.57%

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets.

Product-s12700 s12700_firmware s5700 s5700_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-3950

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.09% / 26.51%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets.

Product-ar3200 ar3200_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-3678

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.06%

7 Day CHG~0.00%

Published-11 Apr, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.

Product-s5300 s9300_firmware s7700_firmware s5700 s9700 s5700_firmware s5300_firmware s7700 s9700_firmware s9300 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-5968

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-4.8||MEDIUM

EPSS-0.04% / 12.55%

7 Day CHG~0.00%

Published-19 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network.

Product-e585u-82 e585 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5302

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.33%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 19:50

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Paris-L29B Emily-L09C Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 Honor Magic2 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Berkeley-AL20 Sydney-L21 Sydney-L22 HUAWEI nova lite 3 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 SydneyM-AL00 Honor 10 Lite Jackman-L22 ALP-AL00B Sydney-L22BR HUAWEI P20 Columbia-AL10B ALP-L29 HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5244

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.11% / 29.28%

7 Day CHG~0.00%

Published-04 Jun, 2019 | 17:54

Updated-04 Aug, 2024 | 19:47

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak.

Product-mate_9_pro_fimware mate_9_pro Mate 9 Pro

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5266

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.74%

7 Day CHG~0.00%

Published-23 Dec, 2019 | 17:49

Updated-04 Aug, 2024 | 19:47

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled.

Product-p30_firmware p30 Share function P30

CWE ID-CWE-20

Improper Input Validation

CVE-2019-19417

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.36% / 57.29%

7 Day CHG~0.00%

Published-08 Jul, 2020 | 16:53

Updated-05 Aug, 2024 | 02:16

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Product-ar2200_firmware usg9560_firmware viewpoint_9030 ips_module ar3200_firmware ar2200 espace_u1930 te60 viewpoint_8660_firmware srg3300 nip6300_firmware te30 netengine16ex ar120-s_firmware usg9560 svn5800-c_firmware ngfw_module dp300 ar200-s espace_u1911 ar120-s softco_firmware ar510 usg9520 ar150-s semg9811_firmware te60_firmware srg2300 secospace_usg6500_firmware svn5800 ar150_firmware ips_module_firmware secospace_usg6600_firmware ar3600 ar3200 semg9811 dp300_firmware ar200-s_firmware espace_u1910 softco svn5600 ar160_firmware vp9660_firmware usg9520_firmware espace_u1960 netengine16ex_firmware secospace_usg6600 viewpoint_9030_firmware ar1200 te30_firmware vp9660 srg1300 srg1300_firmware secospace_usg6300 espace_u1980 srg2300_firmware te40 srg3300_firmware espace_u1910_firmware espace_u1930_firmware smc2.0_firmware ar1200-s_firmware usg9500 te50 espace_u1911_firmware rse6500 nip6600 espace_u1981_firmware nip6800_firmware espace_u1981 ar160 espace_u1980_firmware nip6300 secospace_usg6500 usg9500_firmware svn5800_firmware ar2200-s tp3206 tp3206_firmware svn5600_firmware ar510_firmware ar150-s_firmware ar1200-s ar150 smc2.0 ngfw_module_firmware ar1200_firmware ar200 espace_u1960_firmware ar3600_firmware ar2200-s_firmware nip6800 te40_firmware rse6500_firmware viewpoint_8660 ar200_firmware nip6600_firmware svn5800-c te50_firmware secospace_usg6300_firmware SoftCo eSpace U1960 NGFW Module SMC2.0 TP3206 USG9500 ViewPoint 9030 eSpace U1911 TE50 SRG1300 TE40 AR2200-S VP9660 eSpace U1980 SVN5800 AR160 NIP6300 SVN5600 NetEngine16EX AR1200 AR150 AR2200 IPS Module ViewPoint 8660 AR150-S NIP6600 TE30 NIP6800 Secospace USG6600 USG9520 RSE6500 eSpace U1910 DP300 eSpace U1981 USG9560 TE60 AR120-S AR510 Secospace USG6300 SRG2300 SRG3300 AR3200 AR1200-S SVN5800-C SeMG9811 AR3600 eSpace U1930 AR200 Secospace USG6500 AR200-S

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-19416

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.36% / 57.29%

7 Day CHG~0.00%

Published-08 Jul, 2020 | 16:55

Updated-05 Aug, 2024 | 02:16

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2022-31762

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.83%

7 Day CHG~0.00%

Published-13 Jun, 2022 | 14:56

Updated-03 Aug, 2024 | 07:26

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.

Product-magic_ui emui harmonyos Magic UI HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37084

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.39%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:05

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37013

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.25% / 47.75%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:27

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7922

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.22%

7 Day CHG~0.00%

Published-12 Sep, 2018 | 15:00

Updated-05 Aug, 2024 | 06:37

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.

Product-alp-l09_firmware alp-l09 ALP-L09

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7934

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.64%

7 Day CHG~0.00%

Published-31 Jul, 2018 | 14:00

Updated-05 Aug, 2024 | 06:37

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.

Product-mate_10_pro mate_10_pro_firmware Mate 10 Pro

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54108

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.13% / 32.59%

7 Day CHG~0.00%

Published-12 Dec, 2024 | 12:03

Updated-12 Dec, 2024 | 20:18

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-45441

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.07% / 22.10%

7 Day CHG~0.00%

Published-04 Sep, 2024 | 01:37

Updated-12 Sep, 2024 | 19:35

Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will affect availability.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-45446

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.71%

7 Day CHG~0.00%

Published-04 Sep, 2024 | 02:14

Updated-06 Sep, 2024 | 14:01

Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnerability will affect availability.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-45444

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 4.58%

7 Day CHG~0.00%

Published-04 Sep, 2024 | 01:51

Updated-06 Sep, 2024 | 13:48

Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-emui harmonyos HarmonyOS EMUI harmonyos emui

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17222

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.8||HIGH

EPSS-0.85% / 74.02%

7 Day CHG~0.00%

Published-09 Mar, 2018 | 17:00

Updated-05 Aug, 2024 | 20:43

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code.

Product-espace_7950 espace_7950_firmware espace_8950 espace_8950_firmware eSpace 7950; eSpace 8950

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17219

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.15% / 36.61%

7 Day CHG~0.00%

Published-09 Mar, 2018 | 17:00

Updated-05 Aug, 2024 | 20:44

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service.