ByteOS

Product

Sydney-L21

Versions

Affected

Versions earlier than 9.1.0.215(C432E1R1P1T8)
Versions earlier than 9.1.0.213(C185E1R1P1T8)

Vendor

Product

Sydney-L21BR

Versions

Affected

Versions earlier than 9.1.0.213(C185E1R1P2T8)

Vendor

Product

Sydney-L22

Versions

Affected

Versions earlier than 9.1.0.258(C636E1R1P1T8)

Vendor

Product

Sydney-L22BR

Versions

Affected

Versions earlier than 9.1.0.258(C636E1R1P1T8)

Vendor

Product

SydneyM-AL00

Versions

Affected

Versions earlier than 9.1.0.228(C00E78R1P7T8)

Vendor

Product

SydneyM-L01

Versions

Affected

Versions earlier than 9.1.0.215(C782E2R1P1T8)
Versions earlier than 9.1.0.213(C185E1R1P1T8)
Versions earlier than 9.1.0.270(C432E3R1P1T8)

Vendor

Product

SydneyM-L03

Versions

Affected

Versions earlier than 9.1.0.217(C605E1R1P1T8)

Vendor

Product

SydneyM-L21

Versions

Affected

Versions earlier than 9.1.0.221(C461E1R1P1T8)
Versions earlier than 9.1.0.215(C432E4R1P1T8)

Vendor

Product

SydneyM-L22

Versions

Affected

Versions earlier than 9.1.0.259(C185E1R1P2T8)
Versions earlier than 9.1.0.220(C635E1R1P2T8)
Versions earlier than 9.1.0.216(C569E1R1P1T8)

Vendor

Product

SydneyM-L23

Versions

Affected

Versions earlier than 9.1.0.226(C605E2R1P1T8)

Vendor

Product

Yale-L21A

Versions

Affected

Versions earlier than 9.1.0.154(C432E2R3P2)
Versions earlier than 9.1.0.154(C461E2R2P1)
Versions earlier than 9.1.0.154(C636E2R2P1)

Vendor

Product

Honor 20

Versions

Affected

Versions earlier than 9.1.0.152(C00E150R5P1)

Vendor

Product

Honor Magic2

Versions

Affected

Versions earlier than 10.0.0.187

Vendor

Product

Honor V20

Versions

Affected

Versions earlier than 9.1.0.234(C00E234R4P3)

Vendor

Product

HUAWEI Mate 20

Versions

Affected

Versions earlier than 9.1.0.131(C00E131R3P1)

Vendor

Product

HUAWEI Mate 20 Pro

Versions

Affected

Versions earlier than 9.1.0.310(C185E10R2P1)

Vendor

Product

HUAWEI Mate 20 RS

Versions

Affected

Versions earlier than 9.1.0.135(C786E133R3P1)

Vendor

Product

HUAWEI Mate 20 X

Versions

Affected

Versions earlier than 9.1.0.135(C00E133R2P1)

Vendor

Product

HUAWEI P20

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

HUAWEI P20 Pro

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

HUAWEI P30

Versions

Affected

Versions earlier than 9.1.0.193

Vendor

Product

HUAWEI P30 Pro

Versions

Affected

Versions earlier than 9.1.0.186(C00E180R2P1)

Vendor

Product

HUAWEI Y9 2019

Versions

Affected

Versions earlier than 9.1.0.220(C605E3R1P1T8)

Vendor

Product

HUAWEI nova lite 3

Versions

Affected

Versions earlier than 9.1.0.305(C635E8R2P2)

Vendor

Product

Honor 10 Lite

Versions

Affected

Versions earlier than 9.1.0.283(C605E8R2P2)

Vendor

Product

Honor 8X

Versions

Affected

Versions earlier than 9.1.0.221(C461E2R1P1T8)

Vendor

Product

Honor View 20

Versions

Affected

Versions earlier than 9.1.0.238(C432E1R3P1)

Vendor

Product

Jackman-L22

Versions

Affected

Versions earlier than 9.1.0.247(C636E2R4P1T8)

Vendor

Product

Paris-L21B

Versions

Affected

Versions earlier than 9.1.0.331(C432E1R1P2T8)

Vendor

Product

Paris-L21MEB

Versions

Affected

Versions earlier than 9.1.0.331(C185E4R1P3T8)

Vendor

Product

Paris-L29B

Versions

Affected

Versions earlier than 9.1.0.331(C636E1R1P3T8)

Vendor

Product

Sydney-AL00

Versions

Affected

Versions earlier than 9.1.0.212(C00E62R1P7T8)

Vendor

Product

Charlotte-L29C

Versions

Affected

Versions earlier than 9.1.0.325(C185E4R1P11T8)
Versions earlier than 9.1.0.335(C636E3R1P13T8)
Versions earlier than 9.1.0.345(C432E8R1P11T8)
Versions earlier than 9.1.0.336(C605E3R1P12T8)

Vendor

Product

Columbia-AL10B

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

Columbia-L29D

Versions

Affected

Versions earlier than 9.1.0.350(C461E3R1P11T8)
Versions earlier than 9.1.0.350(C185E3R1P12T8)
Versions earlier than 9.1.0.350(C10E5R1P14T8)
Versions earlier than 9.1.0.351(C432E5R1P13T8)

Vendor

Product

Cornell-AL00A

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

Cornell-L29A

Versions

Affected

Versions earlier than 9.1.0.328(C185E1R1P9T8)
Versions earlier than 9.1.0.328(C432E1R1P9T8)
Versions earlier than 9.1.0.330(C461E1R1P9T8)
Versions earlier than 9.1.0.328(C636E2R1P12T8)

Vendor

Product

Emily-L09C

Versions

Affected

Versions earlier than 9.1.0.336(C605E4R1P12T8)
Versions earlier than 9.1.0.311(C185E2R1P12T8)
Versions earlier than 9.1.0.345(C432E10R1P12T8)

Vendor

Product

Emily-L29C

Versions

Affected

Versions earlier than 9.1.0.311(C605E2R1P12T8)
Versions earlier than 9.1.0.311(C636E7R1P13T8)
Versions earlier than 9.1.0.311(C432E7R1P11T8)

Vendor

Product

Ever-L29B

Versions

Affected

Versions earlier than 9.1.0.311(C185E3R3P1)

Vendor

Product

ALP-AL00B

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R2P1T8)

Vendor

Product

ALP-L09

Versions

Affected

Versions earlier than 9.1.0.300(C432E4R1P9T8)

Vendor

Product

ALP-L29

Versions

Affected

Versions earlier than 9.1.0.315(C636E5R1P13T8)

Vendor

Product

BLA-L29C

Versions

Affected

Versions earlier than 9.1.0.321(C636E4R1P14T8)
Versions earlier than 9.1.0.330(C432E6R1P12T8)
Versions earlier than 9.1.0.302(C635E4R1P13T8)

Vendor

Product

Berkeley-AL20

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R2P1T8)

Vendor

Product

Berkeley-L09

Versions

Affected

Versions earlier than 9.1.0.350(C10E3R1P14T8)
Versions earlier than 9.1.0.351(C432E5R1P13T8)
Versions earlier than 9.1.0.350(C636E4R1P13T8)

Vendor

Product

Charlotte-L09C

Versions

Affected

Versions earlier than 9.1.0.311(C185E4R1P11T8)
Versions earlier than 9.1.0.345(C432E8R1P11T8)

Problem Types

Type	CWE ID	Description
text	N/A	Denial of Service

Type: text

CWE ID: N/A

Description: Denial of Service

References

Hyperlink	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	x_refsource_CONFIRM

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@huawei.com

Published At:27 Apr, 2020 | 20:15

Updated At:05 May, 2020 | 17:25

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	2.9	LOW	AV:A/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 2.9

Base severity: LOW

Vector:

AV:A/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

cpe:2.3:o:huawei:alp-al00b_firmware:*:*:*:*:*:*:*:*

>>alp-al00b_firmware>>Versions before 9.1.0.333\(c00e333r2p1t8\)(exclusive)

cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:*

>>alp-al00b>>-

cpe:2.3:o:huawei:alp-l09_firmware:*:*:*:*:*:*:*:*

>>alp-l09_firmware>>Versions before 9.1.0.300\(c432e4r1p9t8\)(exclusive)

cpe:2.3:h:huawei:alp-l09:-:*:*:*:*:*:*:*

>>alp-l09>>-

cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:*

>>alp-l29_firmware>>Versions before 9.1.0.315\(c636e5r1p13t8\)(exclusive)

cpe:2.3:h:huawei:alp-l29:-:*:*:*:*:*:*:*

>>alp-l29>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.321\(c636e4r1p14t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.330\(c432e6r1p12t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.302\(c635e4r1p13t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:h:huawei:berkeley-al20:-:*:*:*:*:*:*:*

>>berkeley-al20>>-

cpe:2.3:o:huawei:berkeley-al20_firmware:*:*:*:*:*:*:*:*

>>berkeley-al20_firmware>>Versions before 9.1.0.333\(c00e333r2p1t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.350\(c10e3r1p14t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.351\(c432e5r1p13t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.350\(c636e4r1p13t8\)(exclusive)

cpe:2.3:h:huawei:charlotte-l09c:-:*:*:*:*:*:*:*

>>charlotte-l09c>>-

cpe:2.3:o:huawei:charlotte-l09c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l09c_firmware>>Versions before 9.1.0.311\(c185e4r1p11t8\)(exclusive)

cpe:2.3:h:huawei:charlotte-l09c:-:*:*:*:*:*:*:*

>>charlotte-l09c>>-

cpe:2.3:o:huawei:charlotte-l09c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l09c_firmware>>Versions before 9.1.0.345\(c432e8r1p11t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.325\(c185e4r1p11t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.335\(c636e3r1p13t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.345\(c432e8r1p11t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.336\(c605e3r1p12t8\)(exclusive)

cpe:2.3:o:huawei:columbia-al10b_firmware:*:*:*:*:*:*:*:*

>>columbia-al10b_firmware>>Versions before 9.1.0.333\(c00e333r1p1t8\)(exclusive)

cpe:2.3:h:huawei:columbia-al10b:-:*:*:*:*:*:*:*

>>columbia-al10b>>-

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c461e3r1p11t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c185e3r1p12t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c10e5r1p14t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.351\(c432e5r1p13t8\)(exclusive)

cpe:2.3:o:huawei:cornell-al00a_firmware:*:*:*:*:*:*:*:*

>>cornell-al00a_firmware>>Versions before 9.1.0.333\(c00e333r1p1t8\)(exclusive)

cpe:2.3:h:huawei:cornell-al00a:-:*:*:*:*:*:*:*

>>cornell-al00a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.328\(c185e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.328\(c432e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.330\(c461e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	psirt@huawei.com	Vendor Advisory

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Source: psirt@huawei.com

Resource:

Vendor Advisory

Similar CVEs

261Records found

CVE-2019-5303

Matching Score-10

Assigner-Huawei Technologies

Matching Score-10

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.30%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 20:01

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Emily-L09C Paris-L29B Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Honor Magic2 Berkeley-AL20 Sydney-L21 HUAWEI nova lite 3 Sydney-L22 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 ALP-AL00B Honor 10 Lite Jackman-L22 SydneyM-AL00 Columbia-AL10B HUAWEI P20 ALP-L29 Sydney-L22BR HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1837

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.05% / 15.00%

7 Day CHG~0.00%

Published-06 Jul, 2020 | 17:27

Updated-04 Aug, 2024 | 06:53

ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.

Product-changxiang_8_plus changxiang_8_plus_firmware ChangXiang 8 Plus

CVE-2017-17282

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-3.1||LOW

EPSS-0.05% / 15.58%

7 Day CHG~0.00%

Published-09 Mar, 2018 | 21:00

Updated-05 Aug, 2024 | 20:44

SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.

Product-te60_firmware te30_firmware dp300 rp200 te40_firmware te60 dp300_firmware te40 te30 te50_firmware te50 rp200_firmware DP300, RP200, TE30, TE40, TE50, TE60

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-22467

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.03% / 5.14%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:33

Updated-03 Aug, 2024 | 18:44

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-32989

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-3.3||LOW

EPSS-0.06% / 17.02%

7 Day CHG~0.00%

Published-11 May, 2024 | 09:42

Updated-11 Dec, 2024 | 16:08

Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2024-32992

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.16% / 36.93%

7 Day CHG~0.00%

Published-11 May, 2024 | 09:49

Updated-11 Dec, 2024 | 16:01

Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availability.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1880

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.51%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 15:14

Updated-04 Aug, 2024 | 06:53

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal.

Product-lion-al00c lion-al00c_firmware Lion-AL00C

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1811

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.8||HIGH

EPSS-0.27% / 50.32%

7 Day CHG~0.00%

Published-17 Feb, 2020 | 23:28

Updated-04 Aug, 2024 | 06:46

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

Product-gaussdb_200 GaussDB 200

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1828

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.28%

7 Day CHG~0.00%

Published-17 Feb, 2020 | 19:49

Updated-04 Aug, 2024 | 06:46

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.

Product-usg9500_firmware secospace_usg6600 nip6800_firmware nip6800 secospace_usg6600_firmware usg9500 NIP6800 Secospace USG6600 USG9500

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1825

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 39.15%

7 Day CHG~0.00%

Published-15 Jun, 2020 | 15:01

Updated-04 Aug, 2024 | 06:46

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.

Product-fusionaccess FusionAccess

CWE ID-CWE-20

Improper Input Validation

CVE-2022-48605

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.44%

7 Day CHG~0.00%

Published-25 Sep, 2023 | 12:20

Updated-24 Sep, 2024 | 15:07

Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

Product-emui harmonyos HarmonyOS EMUI harmonyos emui

CWE ID-CWE-20

Improper Input Validation

CVE-2022-48356

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 25.19%

7 Day CHG~0.00%

Published-27 Mar, 2023 | 00:00

Updated-19 Feb, 2025 | 19:15

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2022-46328

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 20.90%

7 Day CHG~0.00%

Published-20 Dec, 2022 | 00:00

Updated-17 Apr, 2025 | 14:15

Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8227

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.5||HIGH

EPSS-0.16% / 37.42%

7 Day CHG~0.00%

Published-24 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.

Product-vp_9660_firmware vp9660 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-44556

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 20.78%

7 Day CHG~0.00%

Published-08 Nov, 2022 | 00:00

Updated-01 May, 2025 | 18:15

Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2022-44553

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 25.18%

7 Day CHG~0.00%

Published-09 Nov, 2022 | 00:00

Updated-01 May, 2025 | 14:15

The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider. Successful exploitation of this vulnerability may cause third-party apps to start periodically.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8758

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.23%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).

Product-mate_8 mate_8_firmware Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561 and earlier versions,NXT-DL10C00B561 and earlier versions,NXT-TL10C00B561 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8278

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.27% / 50.18%

7 Day CHG~0.00%

Published-03 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service (device restart) via an unspecified URL.

Product-usg9520 usg9560 usg9580 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8756

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.23%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart).

Product-mate_8 mate_8_firmware Mate8 NXT-AL10C00B197 and earlier versions,NXT-DL10C00B197 and earlier versions,NXT-TL10C00B197 and earlier versions,NXT-CL10C00B197 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8273

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.06%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.

Product-hisuite HiSuite 4.0.5.300_OVE

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-284

Improper Access Control

CVE-2016-8796

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.59%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition.

Product-usg9580 usg9520 usg9560_firmware usg9560 usg9520_firmware usg9580_firmware USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8275

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 46.02%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.

Product-anyoffice AnyOffice V200R006C00

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8762

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5||MEDIUM

EPSS-0.03% / 5.83%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.

Product-p9_lite_firmware p9_lite p8_lite p9_firmware p8_lite_firmware p9 P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8277

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.23% / 45.98%

7 Day CHG~0.00%

Published-03 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service (device restart) via an unspecified command parameter.

Product-usg9520 usg9560 usg9580 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-6824

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.20% / 41.97%

7 Day CHG~0.00%

Published-22 Sep, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets.

Product-ac6005 ac6605 ac6003_firmware ac6605_firmware ac6003 ac6005_firmware acu2 acu2_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-38985

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 24.15%

7 Day CHG~0.00%

Published-14 Oct, 2022 | 00:00

Updated-15 May, 2025 | 15:16

The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2016-6206

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.41% / 79.69%

7 Day CHG~0.00%

Published-24 Mar, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted packet.

Product-ar3200_firmware ar3200 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-6178

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.27% / 78.66%

7 Day CHG~0.00%

Published-02 Aug, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote attackers with control plane access to cause a denial of service or execute arbitrary code via a crafted packet.

Product-cx600 ptn_6900-2-m8 cx600_firmware ne40e_firmware ne5000e_firmware ne40e ne5000e cloudengine_12800_firmware ptn_6900-2-m8_firmware cloudengine_12800 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-4087

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.83% / 73.56%

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets.

Product-s12700 s12700_firmware s5700 s5700_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-32144

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.6||HIGH

EPSS-0.04% / 8.89%

7 Day CHG-0.00%

Published-20 Dec, 2024 | 01:52

Updated-11 Jul, 2025 | 14:32

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. (Vulnerability ID: HWPSIRT-2022-76192) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32144.

Product-cv81-wdm_firmware cv81-wdm CV81-WDM FW

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-346

Origin Validation Error

CVE-2015-8305

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.61%

7 Day CHG~0.00%

Published-07 Apr, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege.

Product-p7_firmware p7 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8331

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.4||HIGH

EPSS-0.13% / 33.72%

7 Day CHG~0.00%

Published-11 Jan, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

Product-vcn500 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8084

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.1||HIGH

EPSS-0.36% / 57.25%

7 Day CHG~0.00%

Published-07 Dec, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets.

Product-unified_security_gateway_firmware usg5100 usg2100 usg5500 usg2200 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8678

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-24 Mar, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows remote attackers to cause a denial of service (crash) via a crafted application.

Product-mate_s_firmware p8 mate_s p8_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8670

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 38.08%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service.

Product-logcenter LogCenter V100R001C10

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8226

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service (crash) via a crafted application with the system or camera permission, a different vulnerability than CVE-2015-8225.

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8225

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8229

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-0.19% / 40.62%

7 Day CHG~0.00%

Published-24 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered device.

Product-espace_firmware espace_unified_gateway_u2980 espace_unified_gateway_u2990 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7845

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.22% / 44.50%

7 Day CHG~0.00%

Published-19 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets.

Product-espace_firmware espace_unified_gateway_u1980 espace_unified_gateway_u1960 espace_unified_gateway_u1930 espace_unified_gateway_u1910 espace_unified_gateway_u1981 espace_unified_gateway_u1911 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7847

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.92%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious packet to the Common Gateway Interface (CGI) of a target device and make it fail while setting the port attribute, which causes a DoS attack.

Product-e3272s_firmware e3272s E3272s Versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00

CWE ID-CWE-20

Improper Input Validation

CVE-2021-40017

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.57%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 00:00

Updated-04 Aug, 2024 | 02:27

The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may result in out-of-bounds memory access.

Product-emui harmonyos HarmonyOS;EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7740

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.22%

7 Day CHG~0.00%

Published-13 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.

Product-p7_firmware p8_ale-ul00_firmware p7 p8_ale-ul00 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2022-31762

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.80%

7 Day CHG~0.00%

Published-13 Jun, 2022 | 14:56

Updated-03 Aug, 2024 | 07:26

The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.

Product-magic_ui emui harmonyos Magic UI HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37060

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2015-3913

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.04%

7 Day CHG~0.00%

Published-08 Jun, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37096

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:06

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.

Product-harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37116

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.1||CRITICAL

EPSS-0.27% / 49.69%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37004

Matching Score-6

Assigner-Huawei Technologies