Vulnerabilities in Huawei

1,367 results
Vexday analysis

Com 1.362 CVEs catalogadas, o portfólio de vulnerabilidades da Huawei apresenta volume expressivo, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, com nenhuma entrada confirmada no CISA KEV. O tipo de falha mais frequente é CWE-125 (leitura fora dos limites de buffer), padrão que tende a viabilizar vazamento de informações ou condições de instabilidade em equipamentos de rede e sistemas embarcados. A CVE de maior pontuação EPSS no momento é CVE-2019-5285, com índice de 0,0166 — valor baixo em termos absolutos, mas que ainda merece atenção em ambientes onde o ativo afetado esteja exposto. A ausência de PoCs públicas conhecidas reduz a superfície de exploração imediata, mas os 57 registros de severidade crítica e as 47 CVEs surgidas nos últimos 90 dias indicam que a gestão contínua de patches permanece necessária.

CVE-2021-37061—There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to ScEPSS 0.7%CVE-2021-39978—Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.EPSS 0.7%CVE-2021-40009—There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect serEPSS 0.7%CVE-2021-40003—HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.6%CVE-2021-37013—There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availabEPSS 0.6%CVE-2021-36997—There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerabilEPSS 0.6%CVE-2021-37029—There is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availaEPSS 0.6%CVE-2021-39967HIGHThere is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.SuccessfEPSS 0.6%CVE-2021-37044—There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabiliEPSS 0.6%CVE-2021-46741—The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability EPSS 0.6%CVE-2021-39982—Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and writeEPSS 0.6%CVE-2021-40004—The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentialEPSS 0.6%CVE-2021-37006—There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause EPSS 0.6%CVE-2021-37086—There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead toEPSS 0.6%CVE-2021-37043—There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to maliciouEPSS 0.6%CVE-2021-37074—There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privileEPSS 0.6%CVE-2021-40026—There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affeEPSS 0.6%CVE-2021-22428—There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bEPSS 0.6%CVE-2020-9208—There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers withoEPSS 0.6%CVE-2021-37030—There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabiEPSS 0.6%