Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2019-19416

Summary
Assigner-huawei
Assigner Org ID-25ac1063-e409-4190-8079-24548c77ea2e
Published At-08 Jul, 2020 | 16:55
Updated At-05 Aug, 2024 | 02:16
Rejected At-
Credits

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:huawei
Assigner Org ID:25ac1063-e409-4190-8079-24548c77ea2e
Published At:08 Jul, 2020 | 16:55
Updated At:05 Aug, 2024 | 02:16
Rejected At:
▼CVE Numbering Authority (CNA)

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

Affected Products
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR120-S
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20 V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR1200
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20 V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR1200-S
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR150
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R007C01
  • V200R007C02
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR150-S
Versions
Affected
  • V200R006C10SPC300
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR160
Versions
Affected
  • V200R006C10
  • V200R006C12
  • V200R007C00
  • V200R007C01
  • V200R007C02
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR200
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R007C01
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR200-S
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR2200
Versions
Affected
  • V200R006C10
  • V200R006C13
  • V200R006C16PWE
  • V200R007C00
  • V200R007C01
  • V200R007C02
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR2200-S
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR3200
Versions
Affected
  • V200R006C10
  • V200R006C11
  • V200R007C00
  • V200R007C01
  • V200R007C02
  • V200R008C00
  • V200R008C10
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR3600
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R007C01
  • V200R008C20
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
AR510
Versions
Affected
  • V200R006C10
  • V200R006C12
  • V200R006C13
  • V200R006C15
  • V200R006C16
  • V200R006C17
  • V200R007C00SPC180T
  • V200R007C00SPC600
  • V200R007C00SPC900
  • V200R007C00SPCb00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
DP300
Versions
Affected
  • V500R002C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
IPS Module
Versions
Affected
  • V100R001C10
  • V100R001C20
  • V100R001C30
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
NGFW Module
Versions
Affected
  • V100R001C10
  • V100R001C20
  • V100R001C30
  • V500R001C00
  • V500R001C20
  • V500R002C00
  • V500R002C10
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
NIP6300
Versions
Affected
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
NIP6600
Versions
Affected
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
NIP6800
Versions
Affected
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
NetEngine16EX
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
RSE6500
Versions
Affected
  • V500R002C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SMC2.0
Versions
Affected
  • V100R003C00SPC200T
  • V100R003C00SPC300T
  • V100R003C00SPC301T
  • V100R003C10
  • V100R005C00SPC100
  • V100R005C00SPC101B001T
  • V100R005C00SPC102
  • V100R005C00SPC103
  • V100R005C00SPC200
  • V100R005C00SPC201T
  • V500R002C00
  • V600R006C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SRG1300
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R007C02
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SRG2300
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R007C02
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SRG3300
Versions
Affected
  • V200R006C10
  • V200R007C00
  • V200R008C20
  • V200R008C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SVN5600
Versions
Affected
  • V200R003C00
  • V200R003C10
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SVN5800
Versions
Affected
  • V200R003C00
  • V200R003C10
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SVN5800-C
Versions
Affected
  • V200R003C00
  • V200R003C10
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SeMG9811
Versions
Affected
  • V300R001C01SPC500
  • V300R001C01SPC500T
  • V300R001C01SPC700
  • V300R001C01SPCa00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
Secospace USG6300
Versions
Affected
  • V100R001C10
  • V100R001C20
  • V100R001C30
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
Secospace USG6500
Versions
Affected
  • V100R001C10
  • V100R001C20
  • V100R001C30
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
Secospace USG6600
Versions
Affected
  • V100R001C00
  • V100R001C10
  • V100R001C20
  • V100R001C30
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
SoftCo
Versions
Affected
  • V200R001C01SPC300
  • V200R001C01SPC400
  • V200R001C01SPC500
  • V200R001C01SPC600
  • V200R001C01SPH703
  • V200R003C00SPC100
  • V200R003C00SPC200
  • V200R003C00SPC300
  • V200R003C00SPC500
  • V200R003C20
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
TE30
Versions
Affected
  • V100R001C02SPC100
  • V100R001C02SPC200 V100R001C10
  • V500R002C00SPC200
  • V500R002C00SPC600
  • V500R002C00SPC700
  • V500R002C00SPC900
  • V500R002C00SPCb00
  • V600R006C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
TE40
Versions
Affected
  • V500R002C00SPC600
  • V500R002C00SPC700
  • V500R002C00SPC900
  • V500R002C00SPCb00
  • V600R006C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
TE50
Versions
Affected
  • V500R002C00SPC600
  • V500R002C00SPCb00
  • V600R006C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
TE60
Versions
Affected
  • V100R001C01SPC100
  • V100R001C10
  • V100R001C10SPC300
  • V100R001C10SPC400
  • V100R001C10SPC500
  • V100R001C10SPC600
  • V100R001C10SPC800
  • V100R003C00
  • V500R002C00
  • V500R002C00SPC100
  • V500R002C00SPC200
  • V500R002C00SPC300
  • V500R002C00SPC600
  • V500R002C00SPC700
  • V500R002C00SPC800
  • V500R002C00SPC900
  • V500R002C00SPCa00
  • V500R002C00SPCb00
  • V600R006C00
  • V600R006C00SPC200
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
TP3206
Versions
Affected
  • V100R002C00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
USG9500
Versions
Affected
  • V300R001C01
  • V300R001C20
  • V500R001C00
  • V500R001C20
  • V500R001C30
  • V500R001C50
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
USG9520
Versions
Affected
  • V300R001C01SPC800PWE
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
USG9560
Versions
Affected
  • V300R001C20SPC300
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
VP9660
Versions
Affected
  • V200R001C02SPC100
  • V200R001C02SPC200
  • V200R001C02SPC300
  • V200R001C02SPC300T
  • V200R001C02SPC400
  • V200R001C30SPC100
  • V200R001C30SPC100B015T
  • V200R001C30SPC101
  • V200R001C30SPC101TB015
  • V200R001C30SPC102T
  • V200R001C30SPC103T
  • V200R001C30SPC104T
  • V200R001C30SPC200
  • V200R001C30SPC200B022T
  • V200R001C30SPC201B023T
  • V200R001C30SPC202B025T
  • V200R001C30SPC203T
  • V200R001C30SPC206T
  • V200R001C30SPC207T
  • V200R001C30SPC208T
  • V200R001C30SPC209T
  • V200R001C30SPC300
  • V200R001C30SPC400
  • V200R001C30SPC400B001
  • V200R001C30SPC400T
  • V200R001C30SPC401T
  • V200R001C30SPC402T
  • V200R001C30SPC403T
  • V200R001C30SPC404T
  • V200R001C30SPC405T
  • V200R001C30SPC600
  • V200R001C30SPC700
  • V200R001C30SPC700T
  • V200R001C30SPC701T
  • V200R001C30SPC702T
  • V200R001C30SPC703T
  • V200R001C30SPC800
  • V200R001C30SPC800T
  • V200R001C30SPC900
  • V200R001C30SPCa00
  • V200R001C30SPCa00T
  • V200R001C30SPCa01
  • V200R001C30SPCa01T
  • V200R001C30SPCa02T
  • V200R001C30SPCb00
  • V200R001C30SPCc00
  • V200R001C30SPCd00
  • V200R001C30SPCd00T
  • V200R001C30SPCd01T
  • V200R001C30SPCd
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
ViewPoint 8660
Versions
Affected
  • V100R008C03B013SP02
  • V100R008C03B013SP03
  • V100R008C03B013SP04
  • V100R008C03SPC100
  • V100R008C03SPC200
  • V100R008C03SPC300
  • V100R008C03SPC400
  • V100R008C03SPC500
  • V100R008C03SPC600
  • V100R008C03SPC700
  • V100R008C03SPC800
  • V100R008C03SPC900
  • V100R008C03SPCa00
  • V100R008C03SPCb00
  • V100R008C03SPCc00
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
ViewPoint 9030
Versions
Affected
  • V100R011C02SPC100
  • V100R011C03B012SP15
  • V100R011C03B012SP16
  • V100R011C03B015SP03
  • V100R011C03LGWL01SPC100
  • V100R011C03LGWL01SPC100B012
  • V100R011C03SPC100
  • V100R011C03SPC200
  • V100R011C03SPC300
  • V100R011C03SPC400
  • V100R011C03SPC500
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1910
Versions
Affected
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC500
  • V100R001C20SPC600
  • V100R001C20SPH703
  • V200R003C00
  • V200R003C20
  • V200R003C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1911
Versions
Affected
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC500
  • V100R001C20SPC600
  • V100R001C20SPH309
  • V100R001C20SPH703
  • V200R003C00
  • V200R003C20
  • V200R003C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1930
Versions
Affected
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC500
  • V100R001C20SPC600
  • V100R001C20SPH703
  • V200R003C00
  • V200R003C20
  • V200R003C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1960
Versions
Affected
  • V100R001C01SPC500
  • V100R001C20LCRW01T
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC600
  • V100R001C20SPC600T
  • V100R001C20SPH309
  • V100R001C20SPH703
  • V200R003C00
  • V200R003C20
  • V200R003C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1980
Versions
Affected
  • V100R001C01SPC500T
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC500T
  • V100R001C20SPC502
  • V100R001C20SPC600
  • V100R001C20SPH309
  • V100R001C20SPH703
  • V200R003C00
  • V200R003C20
  • V200R003C30
Vendor
Huawei Technologies Co., Ltd.Huawei
Product
eSpace U1981
Versions
Affected
  • V100R001C20SPC300
  • V100R001C20SPC400
  • V100R001C20SPC500
  • V100R001C20SPC600
  • V100R001C20SPC700
  • V100R001C20SPH702
  • V100R001C20SPH703
  • V100R001C30
  • V200R003C00
  • V200R003C20
  • V200R003C30
Problem Types
TypeCWE IDDescription
textN/ADoS
Type: text
CWE ID: N/A
Description: DoS
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
x_refsource_CONFIRM
Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
Resource:
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
x_refsource_CONFIRM
x_transferred
Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
Resource:
x_refsource_CONFIRM
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:psirt@huawei.com
Published At:08 Jul, 2020 | 17:15
Updated At:21 Jul, 2021 | 11:39

The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabilities by sending the specially crafted messages to the affected device. Due to the insufficient verification of the packets, successful exploit could allow the attacker to cause buffer overflow and dead loop, leading to DoS condition. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Type: Primary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches

Huawei Technologies Co., Ltd.
huawei
>>ar120-s>>-
cpe:2.3:h:huawei:ar120-s:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar120-s_firmware>>v200r006c10
cpe:2.3:o:huawei:ar120-s_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar120-s_firmware>>v200r007c00
cpe:2.3:o:huawei:ar120-s_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar120-s_firmware>>v200r008c20
cpe:2.3:o:huawei:ar120-s_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar120-s_firmware>>v200r008c30
cpe:2.3:o:huawei:ar120-s_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200>>-
cpe:2.3:h:huawei:ar1200:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r006c10
cpe:2.3:o:huawei:ar1200_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r006c13
cpe:2.3:o:huawei:ar1200_firmware:v200r006c13:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r007c00
cpe:2.3:o:huawei:ar1200_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r007c01
cpe:2.3:o:huawei:ar1200_firmware:v200r007c01:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r007c02
cpe:2.3:o:huawei:ar1200_firmware:v200r007c02:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r008c20
cpe:2.3:o:huawei:ar1200_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200_firmware>>v200r008c30
cpe:2.3:o:huawei:ar1200_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200-s>>-
cpe:2.3:h:huawei:ar1200-s:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200-s_firmware>>v200r006c10
cpe:2.3:o:huawei:ar1200-s_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200-s_firmware>>v200r007c00
cpe:2.3:o:huawei:ar1200-s_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200-s_firmware>>v200r008c20
cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar1200-s_firmware>>v200r008c30
cpe:2.3:o:huawei:ar1200-s_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150>>-
cpe:2.3:h:huawei:ar150:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r006c10
cpe:2.3:o:huawei:ar150_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r007c00
cpe:2.3:o:huawei:ar150_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r007c01
cpe:2.3:o:huawei:ar150_firmware:v200r007c01:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r007c02
cpe:2.3:o:huawei:ar150_firmware:v200r007c02:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r008c20
cpe:2.3:o:huawei:ar150_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150_firmware>>v200r008c30
cpe:2.3:o:huawei:ar150_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150-s>>-
cpe:2.3:h:huawei:ar150-s:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150-s_firmware>>v200r006c10spc300
cpe:2.3:o:huawei:ar150-s_firmware:v200r006c10spc300:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150-s_firmware>>v200r007c00
cpe:2.3:o:huawei:ar150-s_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150-s_firmware>>v200r008c20
cpe:2.3:o:huawei:ar150-s_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar150-s_firmware>>v200r008c30
cpe:2.3:o:huawei:ar150-s_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160>>-
cpe:2.3:h:huawei:ar160:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r006c10
cpe:2.3:o:huawei:ar160_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r006c12
cpe:2.3:o:huawei:ar160_firmware:v200r006c12:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r007c00
cpe:2.3:o:huawei:ar160_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r007c01
cpe:2.3:o:huawei:ar160_firmware:v200r007c01:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r007c02
cpe:2.3:o:huawei:ar160_firmware:v200r007c02:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r008c20
cpe:2.3:o:huawei:ar160_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar160_firmware>>v200r008c30
cpe:2.3:o:huawei:ar160_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200>>-
cpe:2.3:h:huawei:ar200:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200_firmware>>v200r006c10
cpe:2.3:o:huawei:ar200_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200_firmware>>v200r007c00
cpe:2.3:o:huawei:ar200_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200_firmware>>v200r007c01
cpe:2.3:o:huawei:ar200_firmware:v200r007c01:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200_firmware>>v200r008c20
cpe:2.3:o:huawei:ar200_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200_firmware>>v200r008c30
cpe:2.3:o:huawei:ar200_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200-s>>-
cpe:2.3:h:huawei:ar200-s:-:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200-s_firmware>>v200r006c10
cpe:2.3:o:huawei:ar200-s_firmware:v200r006c10:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200-s_firmware>>v200r007c00
cpe:2.3:o:huawei:ar200-s_firmware:v200r007c00:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200-s_firmware>>v200r008c20
cpe:2.3:o:huawei:ar200-s_firmware:v200r008c20:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar200-s_firmware>>v200r008c30
cpe:2.3:o:huawei:ar200-s_firmware:v200r008c30:*:*:*:*:*:*:*
Huawei Technologies Co., Ltd.
huawei
>>ar2200_firmware>>v200r006c10
cpe:2.3:o:huawei:ar2200_firmware:v200r006c10:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-119Primarynvd@nist.gov
CWE-20Primarynvd@nist.gov
CWE ID: CWE-119
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-20
Type: Primary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-enpsirt@huawei.com
Vendor Advisory
Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-sip-en
Source: psirt@huawei.com
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

2838Records found

CVE-2023-34162
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 25.92%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-12 Dec, 2024 | 01:23
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiHarmonyOSEMUI
CVE-2022-48498
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.06% / 19.92%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-12 Dec, 2024 | 21:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling
CVE-2022-48487
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.86%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-03 Aug, 2024 | 15:17
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CVE-2022-48500
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.06% / 19.92%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-26 Dec, 2024 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-404
Improper Resource Shutdown or Release
CVE-2022-48499
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.06% / 19.92%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-24 Dec, 2024 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-404
Improper Resource Shutdown or Release
CVE-2022-48260
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.11% / 29.70%
||
7 Day CHG~0.00%
Published-27 Feb, 2023 | 00:00
Updated-11 Mar, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.

Action-Not Available
Vendor-n/aHuawei Technologies Co., Ltd.
Product-bisheng-wnmbisheng-wnm_firmwareBiSheng-WNM
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2022-48473
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.86%
||
7 Day CHG~0.00%
Published-16 Jun, 2023 | 12:58
Updated-17 Dec, 2024 | 16:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-bisheng-wnm_firmwarebisheng-wnmBiSheng-WNM
CWE ID-CWE-436
Interpretation Conflict
CVE-2022-48471
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.86%
||
7 Day CHG~0.00%
Published-16 Jun, 2023 | 12:57
Updated-17 Dec, 2024 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-bisheng-wnm_firmwarebisheng-wnmBiSheng-WNM
CWE ID-CWE-436
Interpretation Conflict
CVE-2022-48230
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 25.92%
||
7 Day CHG~0.00%
Published-27 Feb, 2023 | 00:00
Updated-11 Mar, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.

Action-Not Available
Vendor-n/aHuawei Technologies Co., Ltd.
Product-bisheng-wnmbisheng-wnm_firmwareBiSheng-WNM
CWE ID-CWE-436
Interpretation Conflict
CVE-2022-47975
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 27.01%
||
7 Day CHG~0.00%
Published-06 Jan, 2023 | 00:00
Updated-09 Apr, 2025 | 20:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiEMUIHarmonyOS
CWE ID-CWE-415
Double Free
CVE-2022-48606
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.21% / 43.97%
||
7 Day CHG~0.00%
Published-26 Sep, 2023 | 01:27
Updated-24 Sep, 2024 | 14:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosHarmonyOSEMUI
CWE ID-CWE-476
NULL Pointer Dereference
CVE-2022-48490
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.71%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-17 Dec, 2024 | 16:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2022-48486
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.71%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-17 Dec, 2024 | 16:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-47976
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 22.41%
||
7 Day CHG~0.00%
Published-06 Jan, 2023 | 00:00
Updated-09 Apr, 2025 | 20:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiEMUIHarmonyOS
CWE ID-CWE-287
Improper Authentication
CVE-2022-48261
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 25.92%
||
7 Day CHG~0.00%
Published-27 Feb, 2023 | 00:00
Updated-11 Mar, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal.

Action-Not Available
Vendor-n/aHuawei Technologies Co., Ltd.
Product-bisheng-wnmbisheng-wnm_firmwareBiSheng-WNM
CWE ID-CWE-436
Interpretation Conflict
CVE-2022-48352
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.10% / 27.96%
||
7 Day CHG~0.00%
Published-27 Mar, 2023 | 00:00
Updated-24 Feb, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosEMUIHarmonyOS
CWE ID-CWE-665
Improper Initialization
CVE-2022-48493
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.06% / 19.92%
||
7 Day CHG~0.00%
Published-19 Jun, 2023 | 00:00
Updated-17 Dec, 2024 | 16:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiEMUI
CWE ID-CWE-1188
Initialization of a Resource with an Insecure Default
CVE-2022-48351
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.10% / 27.96%
||
7 Day CHG~0.00%
Published-27 Mar, 2023 | 00:00
Updated-24 Feb, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosEMUIHarmonyOS
CWE ID-CWE-400
Uncontrolled Resource Consumption
CVE-2022-48357
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.10% / 27.96%
||
7 Day CHG~0.00%
Published-27 Mar, 2023 | 00:00
Updated-19 Feb, 2025 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosHarmonyOSEMUI
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling
CVE-2022-46315
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.11% / 30.50%
||
7 Day CHG~0.00%
Published-20 Dec, 2022 | 00:00
Updated-17 Apr, 2025 | 14:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosEMUIHarmonyOS
CWE ID-CWE-400
Uncontrolled Resource Consumption
CVE-2022-46317
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 21.64%
||
7 Day CHG~0.00%
Published-20 Dec, 2022 | 00:00
Updated-16 Apr, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiHarmonyOSEMUI
CWE ID-CWE-125
Out-of-bounds Read
CVE-2022-46314
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.10% / 28.60%
||
7 Day CHG~0.00%
Published-20 Dec, 2022 | 00:00
Updated-17 Apr, 2025 | 14:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-404
Improper Resource Shutdown or Release
CVE-2022-46322
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.07% / 21.64%
||
7 Day CHG~0.00%
Published-20 Dec, 2022 | 00:00
Updated-16 Apr, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiHarmonyOSEMUI
CWE ID-CWE-787
Out-of-bounds Write
CVE-2024-58113
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.3||MEDIUM
EPSS-0.04% / 10.23%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:38
Updated-07 May, 2025 | 20:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CVE-2024-58111
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.05% / 14.79%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:37
Updated-07 May, 2025 | 20:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-248
Uncaught Exception
CVE-2024-57962
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-6.1||MEDIUM
EPSS-0.02% / 4.03%
||
7 Day CHG~0.00%
Published-06 Feb, 2025 | 12:34
Updated-17 Mar, 2025 | 14:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CVE-2024-58108
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.6||MEDIUM
EPSS-0.03% / 6.47%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:34
Updated-07 May, 2025 | 20:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-58106
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.6||MEDIUM
EPSS-0.03% / 6.47%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:31
Updated-07 May, 2025 | 20:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-58110
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.6||MEDIUM
EPSS-0.03% / 6.47%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:36
Updated-07 May, 2025 | 20:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-58115
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4||MEDIUM
EPSS-0.03% / 6.48%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:40
Updated-07 May, 2025 | 20:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2024-58109
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.6||MEDIUM
EPSS-0.03% / 6.47%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:35
Updated-07 May, 2025 | 20:21
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-58112
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.05% / 14.79%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:37
Updated-07 May, 2025 | 20:21
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-248
Uncaught Exception
CVE-2024-58107
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.03% / 6.55%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:33
Updated-07 May, 2025 | 20:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE ID-CWE-680
Integer Overflow to Buffer Overflow
CVE-2024-58116
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4||MEDIUM
EPSS-0.03% / 6.48%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:40
Updated-07 May, 2025 | 20:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-787
Out-of-bounds Write
CVE-2024-56434
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.4||MEDIUM
EPSS-0.05% / 15.23%
||
7 Day CHG~0.00%
Published-08 Jan, 2025 | 01:32
Updated-13 Jan, 2025 | 21:27
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause service exceptions of the device.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosHarmonyOSEMUI
CWE ID-CWE-672
Operation on a Resource after Expiration or Release
CVE-2024-56442
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.5||MEDIUM
EPSS-0.03% / 7.65%
||
7 Day CHG~0.00%
Published-08 Jan, 2025 | 02:20
Updated-13 Jan, 2025 | 21:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosHarmonyOSEMUI
CWE ID-CWE-227
Not Available
CVE-2024-56446
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4||MEDIUM
EPSS-0.04% / 8.92%
||
7 Day CHG~0.00%
Published-08 Jan, 2025 | 03:01
Updated-13 Jan, 2025 | 21:41
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-457
Use of Uninitialized Variable
CWE ID-CWE-908
Use of Uninitialized Resource
CVE-2024-54115
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.3||MEDIUM
EPSS-0.06% / 18.50%
||
7 Day CHG+0.01%
Published-12 Dec, 2024 | 12:11
Updated-12 Dec, 2024 | 20:22
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-754
Improper Check for Unusual or Exceptional Conditions
CWE ID-CWE-125
Out-of-bounds Read
CVE-2024-54105
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.1||MEDIUM
EPSS-0.04% / 12.48%
||
7 Day CHG+0.01%
Published-12 Dec, 2024 | 11:59
Updated-12 Dec, 2024 | 20:17
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-54113
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-6.5||MEDIUM
EPSS-0.04% / 10.45%
||
7 Day CHG+0.01%
Published-12 Dec, 2024 | 12:09
Updated-12 Dec, 2024 | 20:21
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect power consumption.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-701
Not Available
CVE-2024-54111
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.7||MEDIUM
EPSS-0.02% / 4.38%
||
7 Day CHG~0.00%
Published-12 Dec, 2024 | 12:06
Updated-12 Dec, 2024 | 20:19
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-345
Insufficient Verification of Data Authenticity
CVE-2024-54116
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.3||MEDIUM
EPSS-0.06% / 18.50%
||
7 Day CHG+0.01%
Published-12 Dec, 2024 | 12:12
Updated-12 Dec, 2024 | 20:22
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOS
CWE ID-CWE-754
Improper Check for Unusual or Exceptional Conditions
CWE ID-CWE-125
Out-of-bounds Read
CVE-2021-46882
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.08% / 25.39%
||
7 Day CHG~0.00%
Published-26 May, 2023 | 00:00
Updated-16 Jan, 2025 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiHarmonyOSEMUI
CWE ID-CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-51518
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.3||MEDIUM
EPSS-0.03% / 8.49%
||
7 Day CHG~0.00%
Published-05 Nov, 2024 | 09:08
Updated-06 Nov, 2024 | 23:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosHarmonyOSharmonyos
CWE ID-CWE-248
Uncaught Exception
CVE-2017-2700
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.22% / 44.52%
||
7 Day CHG~0.00%
Published-22 Nov, 2017 | 19:00
Updated-20 Apr, 2025 | 01:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-ac6005ac6005_firmwareac6605_firmwareac6605AC6005,AC6605
CWE ID-CWE-772
Missing Release of Resource after Effective Lifetime
CVE-2022-44546
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.08% / 23.77%
||
7 Day CHG~0.00%
Published-09 Nov, 2022 | 00:00
Updated-01 May, 2025 | 18:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiHarmonyOSEMUI
CWE ID-CWE-459
Incomplete Cleanup
CVE-2017-2712
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-5.3||MEDIUM
EPSS-0.17% / 38.64%
||
7 Day CHG~0.00%
Published-22 Nov, 2017 | 19:00
Updated-20 Apr, 2025 | 01:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-s3300s3300_firmwareS3300
CVE-2022-44555
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 26.39%
||
7 Day CHG~0.00%
Published-09 Nov, 2022 | 00:00
Updated-01 May, 2025 | 14:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiHarmonyOSEMUI
CWE ID-CWE-294
Authentication Bypass by Capture-replay
CVE-2024-47293
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-4.7||MEDIUM
EPSS-0.04% / 11.82%
||
7 Day CHG~0.00%
Published-27 Sep, 2024 | 10:21
Updated-01 Oct, 2024 | 14:25
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-emuiharmonyosHarmonyOSEMUI
CWE ID-CWE-130
Improper Handling of Length Parameter Inconsistency
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-44554
Matching Score-8
Assigner-Huawei Technologies
ShareView Details
Matching Score-8
Assigner-Huawei Technologies
CVSS Score-7.5||HIGH
EPSS-0.09% / 26.39%
||
7 Day CHG~0.00%
Published-09 Nov, 2022 | 00:00
Updated-01 May, 2025 | 14:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause abnormal status of a module on the device.

Action-Not Available
Vendor-Huawei Technologies Co., Ltd.
Product-harmonyosemuiHarmonyOSEMUI
CWE ID-CWE-276
Incorrect Default Permissions
  • Previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • ...
  • 56
  • 57
  • Next
Details not found