ByteOS

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.13% / 33.77%

||

7 Day CHG~0.00%

Published-25 Sep, 2023 | 12:03

Updated-24 Sep, 2024 | 15:56

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54642

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.7||MEDIUM

EPSS-0.01% / 0.69%

||

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:44

Updated-11 Aug, 2025 | 15:23

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54636

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.4||MEDIUM

EPSS-0.01% / 0.68%

||

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:32

Updated-11 Aug, 2025 | 15:20

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54641

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.7||MEDIUM

EPSS-0.01% / 0.69%

||

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:42

Updated-11 Aug, 2025 | 15:22

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54614

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.01% / 1.58%

||

7 Day CHG~0.00%

Published-06 Aug, 2025 | 01:24

Updated-12 Aug, 2025 | 16:31

Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-41303

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 39.11%

||

7 Day CHG~0.00%

Published-25 Sep, 2023 | 12:21

Updated-24 Sep, 2024 | 15:00

Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2015-8265

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-7.5||HIGH

EPSS-0.57% / 67.59%

||

7 Day CHG~0.00%

Published-01 Feb, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.

Product-e5151 e5186 e5151_firmware e5186_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39388

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:28

Updated-10 Oct, 2024 | 15:35

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

CWE ID-CWE-1285

Improper Validation of Specified Index, Position, or Offset in Input

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39382

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:42

Updated-10 Oct, 2024 | 15:35

Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39404

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:41

Updated-09 Oct, 2024 | 16:22

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39389

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.09% / 27.19%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:30

Updated-10 Oct, 2024 | 15:35

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

CWE ID-CWE-1285

Improper Validation of Specified Index, Position, or Offset in Input

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39381

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:41

Updated-10 Oct, 2024 | 15:35

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5268

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.1||HIGH

EPSS-0.08% / 24.09%

||

7 Day CHG~0.00%

Published-29 Nov, 2019 | 20:01

Updated-04 Aug, 2024 | 19:47

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Product-ws5280-10 hirouter-cd20-10_firmware ws6500-10 ws5100-10 ws5280-11_firmware ws5200-11 ws6500-11_firmware hirouter-cd15-10_firmware ws5200-10 hirouter-cd30-11 ws5106-10 hirouter-cd30-10_firmware ws5102-10 cd16-10 cd18-10 tc5200-10 ws5108-10_firmware cd16-10_firmware cd17-10 hirouter-h1-10 hirouter-cd15-10 ws5200-11_firmware ws826-10_firmware cd18-10_firmware hirouter-cd30-11_firmware ws5100-10_firmware ws5280-11 hirouter-h1-10_firmware ws5200-10_firmware ws5280-10_firmware ws5102-10_firmware ws6500-11 hirouter-cd30-10 cd10-10 hirouter-cd21-16_firmware tc5200-10_firmware hirouter-cd20-10 hirouter-cd21-16 ws5108-10 ws5106-10_firmware ws6500-10_firmware cd17-10_firmware ws826-10 cd10-10_firmware CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRouter-CD20-10, HiRouter-CD21-16, HiRouter-CD30-10, HiRouter-CD30-11, HiRouter-H1-10, TC5200-10, WS5100-10, WS5102-10, WS5106-10, WS5108-10, WS5200-10, WS5200-11, , WS5280-10, WS5280-11, WS6500-10, WS6500-11, WS826-10

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5266

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.74%

||

7 Day CHG~0.00%

Published-23 Dec, 2019 | 17:49

Updated-04 Aug, 2024 | 19:47

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled.

Product-p30_firmware p30 Share function P30

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5302

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.30%

||

7 Day CHG~0.00%

Published-27 Apr, 2020 | 19:50

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Paris-L29B Emily-L09C Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 Honor Magic2 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Berkeley-AL20 Sydney-L21 Sydney-L22 HUAWEI nova lite 3 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 SydneyM-AL00 Honor 10 Lite Jackman-L22 ALP-AL00B Sydney-L22BR HUAWEI P20 Columbia-AL10B ALP-L29 HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5244

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.11% / 29.27%

||

7 Day CHG~0.00%

Published-04 Jun, 2019 | 17:54

Updated-04 Aug, 2024 | 19:47

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak.

Product-mate_9_pro_fimware mate_9_pro Mate 9 Pro

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5230

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 32.38%

||

7 Day CHG~0.00%

Published-12 Nov, 2019 | 23:05

Updated-04 Aug, 2024 | 19:47

P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D NEO-AL00 9.1.0.321(C786E320R1P1T8) have an improper validation vulnerability. The system does not perform a properly validation of certain input models, an attacker could trick the user to install a malicious application then craft a malformed model, successful exploit could allow the attacker to get and tamper certain output data information.

Product-p20_pro_firmware mate_rs p20 mate_rs_firmware p20_firmware p20_pro P20 Pro, P20, Mate RS

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5260

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 36.34%

||

7 Day CHG~0.00%

Published-13 Dec, 2019 | 21:52

Updated-04 Aug, 2024 | 19:47

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.

Product-view_20_firmware y9_2019 view_20 y9_2019_firmware HUAWEI Y9 2019;Honor View 20

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5303

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.30%

||

7 Day CHG~0.00%

Published-27 Apr, 2020 | 20:01

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Emily-L09C Paris-L29B Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Honor Magic2 Berkeley-AL20 Sydney-L21 HUAWEI nova lite 3 Sydney-L22 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 ALP-AL00B Honor 10 Lite Jackman-L22 SydneyM-AL00 Columbia-AL10B HUAWEI P20 ALP-L29 Sydney-L22BR HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39390

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:24

Updated-10 Oct, 2024 | 14:35

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39386

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 12:20

Updated-10 Oct, 2024 | 14:35

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39405

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.10% / 28.99%

||

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:37

Updated-10 Oct, 2024 | 14:25

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-34159

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.59%

||

7 Day CHG+0.01%

Published-20 Dec, 2024 | 01:58

Updated-10 Jan, 2025 | 21:45

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnerability ID: HWPSIRT-2022-80078) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-34159.

Product-cv81-wdm cv81-wdm_firmware CV81-WDM FW

CWE ID-CWE-20

Improper Input Validation

CVE-2023-37241

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.42%

||

7 Day CHG~0.00%

Published-06 Jul, 2023 | 12:30

Updated-19 Nov, 2024 | 17:02

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2019-19415

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.36% / 57.28%

||

7 Day CHG~0.00%

Published-08 Jul, 2020 | 16:58

Updated-05 Aug, 2024 | 02:16

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Product-ar2200_firmware usg9560_firmware viewpoint_9030 ips_module ar3200_firmware ar2200 espace_u1930 te60 viewpoint_8660_firmware srg3300 nip6300_firmware te30 netengine16ex ar120-s_firmware usg9560 svn5800-c_firmware ngfw_module dp300 ar200-s espace_u1911 ar120-s softco_firmware ar510 usg9520 ar150-s semg9811_firmware te60_firmware srg2300 secospace_usg6500_firmware svn5800 ar150_firmware ips_module_firmware secospace_usg6600_firmware ar3600 ar3200 semg9811 dp300_firmware ar200-s_firmware espace_u1910 softco svn5600 ar160_firmware vp9660_firmware usg9520_firmware espace_u1960 netengine16ex_firmware secospace_usg6600 viewpoint_9030_firmware ar1200 te30_firmware vp9660 srg1300 srg1300_firmware secospace_usg6300 espace_u1980 srg2300_firmware te40 srg3300_firmware espace_u1910_firmware espace_u1930_firmware smc2.0_firmware ar1200-s_firmware usg9500 te50 espace_u1911_firmware rse6500 nip6600 espace_u1981_firmware nip6800_firmware espace_u1981 ar160 espace_u1980_firmware nip6300 secospace_usg6500 usg9500_firmware svn5800_firmware ar2200-s tp3206 tp3206_firmware svn5600_firmware ar510_firmware ar150-s_firmware ar1200-s ar150 smc2.0 ngfw_module_firmware ar1200_firmware ar200 espace_u1960_firmware ar3600_firmware ar2200-s_firmware nip6800 te40_firmware rse6500_firmware viewpoint_8660 ar200_firmware nip6600_firmware svn5800-c te50_firmware secospace_usg6300_firmware SoftCo eSpace U1960 NGFW Module SMC2.0 TP3206 USG9500 ViewPoint 9030 eSpace U1911 TE50 SRG1300 TE40 AR2200-S VP9660 eSpace U1980 SVN5800 AR160 NIP6300 SVN5600 NetEngine16EX AR1200 AR150 AR2200 IPS Module ViewPoint 8660 AR150-S NIP6600 TE30 NIP6800 Secospace USG6600 USG9520 RSE6500 eSpace U1910 DP300 eSpace U1981 USG9560 TE60 AR120-S AR510 Secospace USG6300 SRG2300 SRG3300 AR3200 AR1200-S SVN5800-C SeMG9811 AR3600 eSpace U1930 AR200 Secospace USG6500 AR200-S

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-19417

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.36% / 57.28%

||

7 Day CHG~0.00%

Published-08 Jul, 2020 | 16:53

Updated-05 Aug, 2024 | 02:16

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Product-ar2200_firmware usg9560_firmware viewpoint_9030 ips_module ar3200_firmware ar2200 espace_u1930 te60 viewpoint_8660_firmware srg3300 nip6300_firmware te30 netengine16ex ar120-s_firmware usg9560 svn5800-c_firmware ngfw_module dp300 ar200-s espace_u1911 ar120-s softco_firmware ar510 usg9520 ar150-s semg9811_firmware te60_firmware srg2300 secospace_usg6500_firmware svn5800 ar150_firmware ips_module_firmware secospace_usg6600_firmware ar3600 ar3200 semg9811 dp300_firmware ar200-s_firmware espace_u1910 softco svn5600 ar160_firmware vp9660_firmware usg9520_firmware espace_u1960 netengine16ex_firmware secospace_usg6600 viewpoint_9030_firmware ar1200 te30_firmware vp9660 srg1300 srg1300_firmware secospace_usg6300 espace_u1980 srg2300_firmware te40 srg3300_firmware espace_u1910_firmware espace_u1930_firmware smc2.0_firmware ar1200-s_firmware usg9500 te50 espace_u1911_firmware rse6500 nip6600 espace_u1981_firmware nip6800_firmware espace_u1981 ar160 espace_u1980_firmware nip6300 secospace_usg6500 usg9500_firmware svn5800_firmware ar2200-s tp3206 tp3206_firmware svn5600_firmware ar510_firmware ar150-s_firmware ar1200-s ar150 smc2.0 ngfw_module_firmware ar1200_firmware ar200 espace_u1960_firmware ar3600_firmware ar2200-s_firmware nip6800 te40_firmware rse6500_firmware viewpoint_8660 ar200_firmware nip6600_firmware svn5800-c te50_firmware secospace_usg6300_firmware SoftCo eSpace U1960 NGFW Module SMC2.0 TP3206 USG9500 ViewPoint 9030 eSpace U1911 TE50 SRG1300 TE40 AR2200-S VP9660 eSpace U1980 SVN5800 AR160 NIP6300 SVN5600 NetEngine16EX AR1200 AR150 AR2200 IPS Module ViewPoint 8660 AR150-S NIP6600 TE30 NIP6800 Secospace USG6600 USG9520 RSE6500 eSpace U1910 DP300 eSpace U1981 USG9560 TE60 AR120-S AR510 Secospace USG6300 SRG2300 SRG3300 AR3200 AR1200-S SVN5800-C SeMG9811 AR3600 eSpace U1930 AR200 Secospace USG6500 AR200-S

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-19398

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.29%

||

7 Day CHG~0.00%

Published-26 Dec, 2019 | 18:24

Updated-05 Aug, 2024 | 02:16

M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify the memory of the device by doing a series of operations. Successful exploit may lead to malicious code execution.

Product-m5_lite_10 m5_lite_10_firmware M5 lite 10

CWE ID-CWE-20

Improper Input Validation

CVE-2023-3456

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.09% / 25.80%

||

7 Day CHG~0.00%

Published-06 Jul, 2023 | 12:34

Updated-21 Nov, 2024 | 14:12

Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2024-54121

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.06% / 17.01%

||

7 Day CHG~0.00%

Published-08 Jan, 2025 | 03:24

Updated-13 Jan, 2025 | 21:42

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54100

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.05% / 15.96%

||

7 Day CHG~0.00%

Published-12 Dec, 2024 | 11:25

Updated-14 Jan, 2025 | 18:32

Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51519

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5||MEDIUM

EPSS-0.02% / 2.51%

||

7 Day CHG-0.00%

Published-05 Nov, 2024 | 09:09

Updated-06 Nov, 2024 | 23:15

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2022-39012

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.06% / 20.10%

||

7 Day CHG~0.00%

Published-28 Dec, 2022 | 00:00

Updated-11 Apr, 2025 | 17:15

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal.

Product-aslan-al10_firmware aslan-al10 Aslan-AL10

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8145

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.51%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.

Product-p10_firmware p10 p10_plus_firmware p10_plus P10, P10 Plus

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8175

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.61%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

Product-warsaw-al00 vicky-al00a victoria-al00a Vicky-AL00A,Victoria-AL00A,Warsaw-AL00

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8164

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-3.3||LOW

EPSS-0.08% / 24.99%

||

7 Day CHG~0.00%

Published-05 Mar, 2018 | 19:00

Updated-17 Sep, 2024 | 04:29

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable.

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8117

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8119

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8129

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 45.68%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8128

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 45.68%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8122

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 48.78%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8126

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8120

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8124

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8146

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.51%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.

Product-p10_firmware p10 p10_plus_firmware p10_plus P10, P10 Plus

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8186

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.61%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

Product-mha-al00a MHA-AL00A

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8123

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.96%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8143

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.23%

||

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system.

Product-honor_5c_firmware p9_lite_firmware p9_lite honor_5c Honor 5C, P9 Lite

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37081

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.18% / 40.10%

||

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:04

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37013

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.25% / 47.73%

||

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:27

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37084

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.36%

||

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:05

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.