ByteOS

Product

Honor 5C, P9 Lite

Versions

Affected

Versions earlier than NEM-L21C432B351, Versions earlier than VNS-L21C10B381

Problem Types

Type	CWE ID	Description
text	N/A	DoS

Type: text

CWE ID: N/A

Description: DoS

References

Hyperlink	Resource
http://www.securityfocus.com/bid/99256	vdb-entry x_refsource_BID
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en	x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/99256

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/99256	vdb-entry x_refsource_BID x_transferred
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securityfocus.com/bid/99256

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@huawei.com

Published At:22 Nov, 2017 | 19:29

Updated At:20 Apr, 2025 | 01:37

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary	2.0	7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 7.1

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:C

CPE Matches

cpe:2.3:o:huawei:honor_5c_firmware:*:*:*:*:*:*:*:*

>>honor_5c_firmware>>Versions before nem-l21c432b351(exclusive)

cpe:2.3:h:huawei:honor_5c:-:*:*:*:*:*:*:*

>>honor_5c>>-

cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:*

>>p9_lite_firmware>>Versions before vns-l21c10b381(exclusive)

cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:*

>>p9_lite>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en	psirt@huawei.com	Vendor Advisory
http://www.securityfocus.com/bid/99256	psirt@huawei.com	Third Party Advisory VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/99256	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en

Source: psirt@huawei.com

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/99256

Source: psirt@huawei.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/99256

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Similar CVEs

495Records found

CVE-2017-8147

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.44%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 5800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 6800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 7800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00, V200R001C00,CloudEngine 8800 with software V100R006C00, V200R001C00,E600 V200R008C00,S12700 with software V200R005C00, V200R006C00, V200R007C00, V200R008C00,S1700 with software V100R006C00, V100R007C00, V200R006C00,S2300 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S2700 with software V100R005C00, V100R006C00, V100R006C03, V100R006C05, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R005C01, V200R005C02, V200R005C03, V200R006C00, V200R007C00, V200R008C00,S5300 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S5700 with software V100R005C00, V100R006C00, V100R006C01, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S6300 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R008C00,S6700 with software V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R003C02, V200R003C10, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S7700 with software V100R003C00, V100R006C00, V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,S9300 with software V100R001C00, V100R002C00, V100R003C00, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R008C10,S9700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00,Secospace USG6600 V500R001C00SPC050 have a MaxAge LSA vulnerability due to improper OSPF implementation. When the device receives special LSA packets, the LS (Link Status) age would be set to MaxAge, 3600 seconds. An attacker can exploit this vulnerability to poison the route table and launch a DoS attack.

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8119

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.98%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8129

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 45.71%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8117

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.98%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2015-2245

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.56%

7 Day CHG~0.00%

Published-27 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).

Product-p7-l09_firmware p7-l09 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1825

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 39.15%

7 Day CHG~0.00%

Published-15 Jun, 2020 | 15:01

Updated-04 Aug, 2024 | 06:46

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.

Product-fusionaccess FusionAccess

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1880

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.54%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 15:14

Updated-04 Aug, 2024 | 06:53

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal.

Product-lion-al00c lion-al00c_firmware Lion-AL00C

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1811

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.8||HIGH

EPSS-0.27% / 50.33%

7 Day CHG~0.00%

Published-17 Feb, 2020 | 23:28

Updated-04 Aug, 2024 | 06:46

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

Product-gaussdb_200 GaussDB 200

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1828

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.30%

7 Day CHG~0.00%

Published-17 Feb, 2020 | 19:49

Updated-04 Aug, 2024 | 06:46

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.

Product-usg9500_firmware secospace_usg6600 nip6800_firmware nip6800 secospace_usg6600_firmware usg9500 NIP6800 Secospace USG6600 USG9500

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2014-9417

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-2.1||LOW

EPSS-0.10% / 28.39%

7 Day CHG~0.00%

Published-24 Dec, 2014 | 18:00

Updated-12 Apr, 2025 | 10:46

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted image.

Product-espace_desktop n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2014-9415

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-1.9||LOW

EPSS-0.11% / 29.27%

7 Day CHG~0.00%

Published-24 Dec, 2014 | 18:00

Updated-12 Apr, 2025 | 10:46

Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QES file.

Product-espace_desktop n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2014-8572

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.06%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37047

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.41%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 15:45

Updated-04 Aug, 2024 | 01:09

There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8120

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.98%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17171

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.2||MEDIUM

EPSS-0.05% / 13.58%

7 Day CHG~0.00%

Published-01 Jun, 2018 | 14:00

Updated-05 Aug, 2024 | 20:43

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Product-mate_8 mate_8_firmware p9_plus_firmware p9 p9_firmware p9_plus HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8124

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.98%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges.

Product-uma UMA

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37116

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.1||CRITICAL

EPSS-0.27% / 49.71%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8164

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-3.3||LOW

EPSS-0.08% / 25.02%

7 Day CHG~0.00%

Published-05 Mar, 2018 | 19:00

Updated-17 Sep, 2024 | 04:29

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation can cause camera application unusable.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-46763

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.48%

7 Day CHG~0.00%

Published-08 Nov, 2023 | 09:33

Updated-04 Sep, 2024 | 15:35

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.

CWE ID-CWE-20

Improper Input Validation

CVE-2014-2271

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-1.80% / 82.02%

7 Day CHG~0.00%

Published-14 Jan, 2020 | 16:07

Updated-06 Aug, 2024 | 10:06

cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java code by leveraging a network position between the client and the registry to block HTTPS traffic.

Vendor-wps n/a Huawei Technologies Co., Ltd.

Product-wps_office p2-6011_firmware p2-6011 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2023-44103

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 24.47%

7 Day CHG~0.00%

Published-11 Oct, 2023 | 11:51

Updated-18 Sep, 2024 | 15:19

Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-125

Out-of-bounds Read

CVE-2023-41300

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.13% / 33.78%

7 Day CHG~0.00%

Published-25 Sep, 2023 | 12:03

Updated-24 Sep, 2024 | 15:56

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17151

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.9||MEDIUM

EPSS-0.13% / 33.18%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 16:00

Updated-05 Aug, 2024 | 20:43

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient validation vulnerability. Since packet validation is insufficient, an unauthenticated attacker may send special H323 packets to exploit the vulnerability. Successful exploit could allow the attacker to send malicious packets and result in DOS attacks.

Product-ar2200_firmware viewpoint_9030 viewpoint_9030_firmware ar1200 te30_firmware ar3200_firmware ar2200 srg1300 te60 srg1300_firmware viewpoint_8660_firmware srg3300_firmware srg2300_firmware srg3300 te40 netengine16ex te30 ar1200-s_firmware ar120-s_firmware ar100-s te50 dp300 tp3106 ar200-s ar120_firmware ar120-s ar510 ar150-s ar160 te60_firmware ar120 ar110-s_firmware srg2300 ar150_firmware ar110-s ar100_firmware ar2200-s ar100 tp3206 tp3206_firmware ar510_firmware ar150-s_firmware ar1200-s ar150 ar3200 dp300_firmware ar1200_firmware ar200-s_firmware ar200 rp200_firmware tp3106_firmware ar100-s_firmware ar160_firmware ar2200-s_firmware rp200 te40_firmware viewpoint_8660 ar200_firmware netengine16ex_firmware te50_firmware AR100,AR100-S,AR110-S,AR120,AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint 8660,ViewPoint 9030

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5303

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.33%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 20:01

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Emily-L09C Paris-L29B Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Honor Magic2 Berkeley-AL20 Sydney-L21 HUAWEI nova lite 3 Sydney-L22 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 ALP-AL00B Honor 10 Lite Jackman-L22 SydneyM-AL00 Columbia-AL10B HUAWEI P20 ALP-L29 Sydney-L22BR HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5268

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.1||HIGH

EPSS-0.08% / 24.13%

7 Day CHG~0.00%

Published-29 Nov, 2019 | 20:01

Updated-04 Aug, 2024 | 19:47

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories.

Product-ws5280-10 hirouter-cd20-10_firmware ws6500-10 ws5100-10 ws5280-11_firmware ws5200-11 ws6500-11_firmware hirouter-cd15-10_firmware ws5200-10 hirouter-cd30-11 ws5106-10 hirouter-cd30-10_firmware ws5102-10 cd16-10 cd18-10 tc5200-10 ws5108-10_firmware cd16-10_firmware cd17-10 hirouter-h1-10 hirouter-cd15-10 ws5200-11_firmware ws826-10_firmware cd18-10_firmware hirouter-cd30-11_firmware ws5100-10_firmware ws5280-11 hirouter-h1-10_firmware ws5200-10_firmware ws5280-10_firmware ws5102-10_firmware ws6500-11 hirouter-cd30-10 cd10-10 hirouter-cd21-16_firmware tc5200-10_firmware hirouter-cd20-10 hirouter-cd21-16 ws5108-10 ws5106-10_firmware ws6500-10_firmware cd17-10_firmware ws826-10 cd10-10_firmware CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRouter-CD20-10, HiRouter-CD21-16, HiRouter-CD30-10, HiRouter-CD30-11, HiRouter-H1-10, TC5200-10, WS5100-10, WS5102-10, WS5106-10, WS5108-10, WS5200-10, WS5200-11, , WS5280-10, WS5280-11, WS6500-10, WS6500-11, WS826-10

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5260

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 36.34%

7 Day CHG~0.00%

Published-13 Dec, 2019 | 21:52

Updated-04 Aug, 2024 | 19:47

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.

Product-view_20_firmware y9_2019 view_20 y9_2019_firmware HUAWEI Y9 2019;Honor View 20

CWE ID-CWE-20

Improper Input Validation

CVE-2021-22444

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.39%

7 Day CHG~0.00%

Published-02 Aug, 2021 | 17:00

Updated-03 Aug, 2024 | 18:44

There is an Input Verification Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause code injection.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39388

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:28

Updated-10 Oct, 2024 | 15:35

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

CWE ID-CWE-1285

Improper Validation of Specified Index, Position, or Offset in Input

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5285

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.25%

7 Day CHG~0.00%

Published-04 Jun, 2019 | 18:47

Updated-04 Aug, 2024 | 19:54

Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109)

Product-s5300 s9700 s9300x s7900 s1700_firmware s2700 s7700_firmware s600-e s2300 s6300_firmware s7700 s1700 s12700 s5700_firmware s9300x_firmware s6700_firmware s2300_firmware s7900_firmware s12700_firmware s9700_firmware s600-e_firmware s5300_firmware s9300_firmware s9300 s5700 s6300 s6700 s2700_firmware S12700, S12700, S12700, S12700, S12700, S12700, S12700, S12700, S1700, S1700, S1700, S1700, S1700, S1700, S2300, S2300, S2300, S2300, S2300, S2300, S2300, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S2700, S5300, S5300, S5300, S5300, S5300, S5300, S5300, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S5700, S600-E, S600-E, S600-E, S600-E, S600-E, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6300, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S6700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7700, S7900, S7900, S7900, S9300, S9300, S9300, S9300, S9300, S9300, S9300, S9300X, S9300X, S9300X, S9300X, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700, S9700

CWE ID-CWE-20

Improper Input Validation

CVE-2023-39382

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.45%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:42

Updated-10 Oct, 2024 | 15:35

Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.

CWE ID-CWE-116

Improper Encoding or Escaping of Output

CWE ID-CWE-20

Improper Input Validation

CVE-2022-48356

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 25.21%

7 Day CHG~0.00%

Published-27 Mar, 2023 | 00:00

Updated-19 Feb, 2025 | 19:15

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.

CWE ID-CWE-20

Improper Input Validation

CVE-2022-48605

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.45%

7 Day CHG~0.00%

Published-25 Sep, 2023 | 12:20

Updated-24 Sep, 2024 | 15:07

Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

Product-emui harmonyos HarmonyOS EMUI harmonyos emui

CWE ID-CWE-20

Improper Input Validation

CVE-2022-46328

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 20.93%

7 Day CHG~0.00%

Published-20 Dec, 2022 | 00:00

Updated-17 Apr, 2025 | 14:15

Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-57960

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.7||HIGH

EPSS-0.03% / 6.92%

7 Day CHG~0.00%

Published-06 Feb, 2025 | 12:32

Updated-17 Mar, 2025 | 14:15

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-56437

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.7||MEDIUM

EPSS-0.05% / 15.08%

7 Day CHG~0.00%

Published-08 Jan, 2025 | 02:01

Updated-13 Jan, 2025 | 19:27

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54109

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.13% / 32.59%

7 Day CHG~0.00%

Published-12 Dec, 2024 | 12:04

Updated-12 Dec, 2024 | 20:18

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54121

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.06% / 17.06%

7 Day CHG~0.00%

Published-08 Jan, 2025 | 03:24

Updated-13 Jan, 2025 | 21:42

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54100

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.05% / 15.98%

7 Day CHG~0.00%

Published-12 Dec, 2024 | 11:25

Updated-14 Jan, 2025 | 18:32

Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54101

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.03% / 6.27%

7 Day CHG-0.01%

Published-12 Dec, 2024 | 11:38

Updated-17 Jan, 2025 | 18:09

Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2024-54107

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.1||HIGH

EPSS-0.08% / 23.76%

7 Day CHG~0.00%

Published-12 Dec, 2024 | 12:01

Updated-12 Dec, 2024 | 20:18

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51513

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.01% / 1.67%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 08:42

Updated-07 Nov, 2024 | 20:30

Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51519

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5||MEDIUM

EPSS-0.02% / 2.53%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 09:09

Updated-06 Nov, 2024 | 23:15

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51514

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.01% / 1.52%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 08:59

Updated-07 Nov, 2024 | 19:43

Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51529

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.09%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 11:18

Updated-07 Nov, 2024 | 19:56

Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability.

Product-emui harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51512

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.02% / 4.17%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 08:39

Updated-07 Nov, 2024 | 17:03

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51530

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 5.26%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 11:19

Updated-07 Nov, 2024 | 19:56

LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-emui harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51511

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.02% / 4.17%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 08:37

Updated-07 Nov, 2024 | 17:03

Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-51520

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 4.17%

7 Day CHG~0.00%

Published-05 Nov, 2024 | 09:10

Updated-07 Nov, 2024 | 19:55

Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2013-4632

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.23% / 45.44%

7 Day CHG~0.00%

Published-20 Jun, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

The Huawei Access Router (AR) before V200R002SPC003 allows remote attackers to cause a denial of service (device reset) via a crafted field in a DHCP request, as demonstrated by a request from an IP phone.

Product-access_router n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-2722

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.8||HIGH

EPSS-0.48% / 63.97%

7 Day CHG~0.00%

Published-22 Nov, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code.