ByteOS

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 24.72%

7 Day CHG~0.00%

Published-07 Apr, 2024 | 09:03

Updated-13 Mar, 2025 | 14:51

Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availability.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2021-22337

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-03 Jun, 2021 | 19:20

Updated-03 Aug, 2024 | 18:37

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause leaking of user click data.

CVE-2021-22325

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 21.75%

7 Day CHG~0.00%

Published-03 Jun, 2021 | 16:10

Updated-03 Aug, 2024 | 18:37

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video streams being intercepted during transmission.

CWE ID-CWE-319

Cleartext Transmission of Sensitive Information

CVE-2020-9143

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.09% / 24.82%

7 Day CHG~0.00%

Published-13 Jan, 2021 | 21:52

Updated-04 Aug, 2024 | 10:19

There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensitive information exposure.

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2020-1810

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 23.44%

7 Day CHG~0.00%

Published-09 Jan, 2020 | 17:44

Updated-04 Aug, 2024 | 06:46

There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.

Product-s5700_firmware s6700_firmware s5700 cloudengine_12800 s6700 cloudengine_12800_firmware CloudEngine 12800;S5700;S6700

CWE ID-CWE-327

Use of a Broken or Risky Cryptographic Algorithm

CVE-2021-46785

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 26.85%

7 Day CHG~0.00%

Published-13 May, 2022 | 15:01

Updated-04 Aug, 2024 | 05:17

The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.

Product-emui harmonyos HarmonyOS EMUI

CVE-2021-46811

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 24.09%

7 Day CHG~0.00%

Published-13 Jun, 2022 | 15:06

Updated-04 Aug, 2024 | 05:17

HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.

Product-magic_ui emui harmonyos Magic UI HarmonyOS EMUI

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2021-37093

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 26.85%

7 Day CHG~0.00%

Published-08 Dec, 2021 | 14:13

Updated-04 Aug, 2024 | 01:09

There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.

Product-magic_ui harmonyos emui Magic UI HarmonyOS EMUI

CVE-2021-39980

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 02:20

Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.

Product-harmonyos HarmonyOS

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2021-40003

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.13% / 32.02%

7 Day CHG~0.00%

Published-07 Jan, 2022 | 22:39

Updated-04 Aug, 2024 | 02:20

HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Product-harmonyos HarmonyOS

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2021-37118

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.

Product-harmonyos HarmonyOS

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2021-36996

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:27

Updated-04 Aug, 2024 | 01:09

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information.

Product-magic_ui emui Magic UI EMUI

CVE-2021-37132

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 24.31%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:16

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission.

Product-harmonyos HarmonyOS

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2021-37114

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 26.85%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Product-magic_ui emui harmonyos Magic UI EMUI Harmony OS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-36998

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:27

Updated-04 Aug, 2024 | 01:09

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds.

Product-magic_ui emui Magic UI EMUI

CVE-2021-37056

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 24.09%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 15:45

Updated-04 Aug, 2024 | 01:09

There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-281

Improper Preservation of Permissions

CVE-2021-37055

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 15:45

Updated-04 Aug, 2024 | 01:09

There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.

Product-magic_ui emui Magic UI EMUI

CVE-2021-22404

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 20.72%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:21

Updated-03 Aug, 2024 | 18:44

There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2021-22407

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.68%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:22

Updated-03 Aug, 2024 | 18:44

There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Product-magic_ui emui Magic UI EMUI

CVE-2021-22475

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 26.57%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:24

Updated-03 Aug, 2024 | 18:44

There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2021-22346

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.08% / 24.71%

7 Day CHG~0.00%

Published-30 Jun, 2021 | 20:55

Updated-03 Aug, 2024 | 18:37

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to the disclosure of user habits.

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2022-48495

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 22.37%

7 Day CHG~0.00%

Published-19 Jun, 2023 | 00:00

Updated-17 Dec, 2024 | 15:40

Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained.

Product-emui HarmonyOS EMUI

CWE ID-CWE-863

Incorrect Authorization

CVE-2017-17171

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.2||MEDIUM

EPSS-0.05% / 14.12%

7 Day CHG~0.00%

Published-01 Jun, 2018 | 14:00

Updated-05 Aug, 2024 | 20:43

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Product-mate_8 mate_8_firmware p9_plus_firmware p9 p9_firmware p9_plus HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus

CWE ID-CWE-20

Improper Input Validation

CVE-2017-17258

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 35.29%

7 Day CHG~0.00%

Published-24 Apr, 2018 | 15:00

Updated-05 Aug, 2024 | 20:43

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R006C13, V200R006C16PWE, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00SPC180T, V200R008C20, V200R008C30, DP300 V500R002C00, IPS Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10SPC200, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, NetEngine16EX V200R006C10, V200R007C00, V200R008C20, V200R008C30, RSE6500 V500R002C00, SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200R003C00, V200R003C10, SeMG9811 V300R001C01, Secospace USG6300 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V100R001C00SPC200, V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, TE30 V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C01, V100R001C10, V500R002C00, V600R006C00, TP3106 V100R002C00, TP3206 V100R002C00, V100R002C10, USG6000V V500R001C20, USG9500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, USG9520 V300R001C01, V300R001C20, USG9560 V300R001C01, V300R001C20, USG9580 V300R001C01, V300R001C20, VP9660 V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02 has a resource management vulnerability in H323 protocol. An unauthenticated, remote attacker could craft malformed packets and send the packets to the affected products in the case of failure to apply for memory. Due to insufficient validation of packets, which could be exploited to cause process crash.

Product-ar2200_firmware usg9560_firmware viewpoint_9030 ips_module ar3200_firmware ar2200 te60 viewpoint_8660_firmware srg3300 nip6300_firmware te30 netengine16ex ar120-s_firmware usg9560 svn5800-c_firmware ngfw_module dp300 ar200-s ar120-s ar510 usg9520 ar150-s semg9811_firmware te60_firmware srg2300 secospace_usg6500_firmware svn5800 ar150_firmware ips_module_firmware secospace_usg6600_firmware ar3600 ar3200 semg9811 usg6000v dp300_firmware ar200-s_firmware tp3106_firmware svn5600 ar160_firmware usg6000v_firmware vp9660_firmware usg9520_firmware usg9580 netengine16ex_firmware secospace_usg6600 viewpoint_9030_firmware ar1200 te30_firmware vp9660 srg1300 srg1300_firmware secospace_usg6300 srg3300_firmware srg2300_firmware te40 ar1200-s_firmware usg9500 te50 rse6500 nip6600 usg9580_firmware nip6800_firmware tp3106 ar160 nip6300 secospace_usg6500 usg9500_firmware svn5800_firmware ar2200-s tp3206 tp3206_firmware svn5600_firmware ar510_firmware ar150-s_firmware ar1200-s ar150 ngfw_module_firmware ar1200_firmware ar200 ar3600_firmware ar2200-s_firmware nip6800 te40_firmware rse6500_firmware viewpoint_8660 ar200_firmware nip6600_firmware svn5800-c te50_firmware secospace_usg6300_firmware AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR3600, AR510, DP300, IPS Module, NGFW Module, NIP6300, NIP6600, NIP6800, NetEngine16EX, RSE6500, SRG1300, SRG2300, SRG3300, SVN5600, SVN5800, SVN5800-C, SeMG9811, Secospace USG6300, Secospace USG6500, Secospace USG6600, TE30, TE40, TE50, TE60, TP3106, TP3206, USG6000V, USG9500, USG9520, USG9560, USG9580, VP9660, ViewPoint 8660, ViewPoint 9030

CWE ID-CWE-20

Improper Input Validation

CVE-2017-15333

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.7||MEDIUM

EPSS-0.08% / 22.84%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 16:00

Updated-05 Aug, 2024 | 19:50

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C02, V200R008C00, V200R009C00, V200R010C00,S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S9700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,eCNS210_TD V100R004C10, V100R004C10SPC003, V100R004C10SPC100, V100R004C10SPC101, V100R004C10SPC102, V100R004C10SPC200, V100R004C10SPC221, V100R004C10SPC400 has a DOS vulnerability. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks.

Product-s12700 s5700_firmware s6700_firmware s9700 s7700 s12700_firmware s1700_firmware ecns210_td_firmware s9700_firmware s7700_firmware ecns210_td s5700 s6700 s1700 S12700, S1700,S3700,S5700,S6700,S7700, S9700, eCNS210_TD

CWE ID-CWE-20

Improper Input Validation

CVE-2016-4087

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.83% / 74.07%

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets.

Product-s12700 s12700_firmware s5700 s5700_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-3678

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.02%

7 Day CHG~0.00%

Published-11 Apr, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.

Product-s5300 s9300_firmware s7700_firmware s5700 s9700 s5700_firmware s5300_firmware s7700 s9700_firmware s9300 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-3950

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.09% / 25.59%

7 Day CHG~0.00%

Published-18 Apr, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Huawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to cause a denial of service (restart) via crafted packets.

Product-ar3200 ar3200_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8331

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.4||HIGH

EPSS-0.13% / 33.12%

7 Day CHG~0.00%

Published-11 Jan, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

Product-vcn500 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8226

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.04%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service (crash) via a crafted application with the system or camera permission, a different vulnerability than CVE-2015-8225.

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8229

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-0.19% / 40.35%

7 Day CHG~0.00%

Published-24 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered device.

Product-espace_firmware espace_unified_gateway_u2980 espace_unified_gateway_u2990 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8305

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.15%

7 Day CHG~0.00%

Published-07 Apr, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege.

Product-p7_firmware p7 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8678

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.04%

7 Day CHG~0.00%

Published-24 Mar, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows remote attackers to cause a denial of service (crash) via a crafted application.

Product-mate_s_firmware p8 mate_s p8_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2019-5302

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 19.98%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 19:50

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Paris-L29B Emily-L09C Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 Honor Magic2 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Berkeley-AL20 Sydney-L21 Sydney-L22 HUAWEI nova lite 3 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 SydneyM-AL00 Honor 10 Lite Jackman-L22 ALP-AL00B Sydney-L22BR HUAWEI P20 Columbia-AL10B ALP-L29 HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8265

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-7.5||HIGH

EPSS-0.57% / 68.01%

7 Day CHG~0.00%

Published-01 Feb, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.

Product-e5151 e5186 e5151_firmware e5186_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8084

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.1||HIGH

EPSS-0.36% / 57.47%

7 Day CHG~0.00%

Published-07 Dec, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets.

Product-unified_security_gateway_firmware usg5100 usg2100 usg5500 usg2200 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8682

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.07% / 21.75%

7 Day CHG~0.00%

Published-13 Apr, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access.

Product-mate_s_firmware p8 mate_s p8_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8670

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 37.63%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service.

Product-logcenter LogCenter V100R001C10

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8225

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.04%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7740

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 4.38%

7 Day CHG~0.00%

Published-13 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.

Product-p7_firmware p8_ale-ul00_firmware p7 p8_ale-ul00 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2025-68970

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.1||MEDIUM

EPSS-0.01% / 0.63%

7 Day CHG~0.00%

Published-14 Jan, 2026 | 02:35

Updated-15 Jan, 2026 | 16:56

Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7844

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.49%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable.

Product-fusionaccess FusionAccess V100R005C10,V100R005C20

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7847

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 5.06%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious packet to the Common Gateway Interface (CGI) of a target device and make it fail while setting the port attribute, which causes a DoS attack.

Product-e3272s_firmware e3272s E3272s Versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00

CWE ID-CWE-20

Improper Input Validation

CVE-2015-3913

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.02%

7 Day CHG~0.00%

Published-08 Jun, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-57960

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.7||HIGH

EPSS-0.04% / 12.56%

7 Day CHG~0.00%

Published-06 Feb, 2025 | 12:32

Updated-17 Mar, 2025 | 14:15

Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2024-58044

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-8.4||HIGH

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-04 Mar, 2025 | 07:12

Updated-04 Mar, 2025 | 14:29

Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability.

Product-HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2022-34159

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.29% / 51.77%

7 Day CHG~0.00%

Published-20 Dec, 2024 | 01:58

Updated-10 Jan, 2025 | 21:45

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnerability ID: HWPSIRT-2022-80078) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-34159.

Product-cv81-wdm cv81-wdm_firmware CV81-WDM FW

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8758

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.07%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).

Product-mate_8 mate_8_firmware Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561 and earlier versions,NXT-DL10C00B561 and earlier versions,NXT-TL10C00B561 and earlier versions

CWE ID-CWE-20

Improper Input Validation

CVE-2024-56437

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.7||MEDIUM

EPSS-0.06% / 18.56%

7 Day CHG~0.00%

Published-08 Jan, 2025 | 02:01

Updated-13 Jan, 2025 | 19:27

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2016-8773

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.21% / 43.38%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with software V200R003C00, V200R005C00, V200R008C00, V200R009C00; S6700 with software V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R008C00, V200R009C00; S7700 with software V200R007C00, V200R008C00, V200R009C00; S9300 with software V200R007C00, V200R008C00, V200R009C00; S9700 with software V200R007C00, V200R008C00, V200R009C00; and S12700 with software V200R007C00, V200R007C01, V200R008C00, V200R009C00 allow the attacker to cause a denial of service condition by sending malformed MPLS packets.