Vulnerabilidades em Huawei

1.378 resultados
Análise Vexday

Com 1.362 CVEs catalogadas, o portfólio de vulnerabilidades da Huawei apresenta volume expressivo, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, com nenhuma entrada confirmada no CISA KEV. O tipo de falha mais frequente é CWE-125 (leitura fora dos limites de buffer), padrão que tende a viabilizar vazamento de informações ou condições de instabilidade em equipamentos de rede e sistemas embarcados. A CVE de maior pontuação EPSS no momento é CVE-2019-5285, com índice de 0,0166 — valor baixo em termos absolutos, mas que ainda merece atenção em ambientes onde o ativo afetado esteja exposto. A ausência de PoCs públicas conhecidas reduz a superfície de exploração imediata, mas os 57 registros de severidade crítica e as 47 CVEs surgidas nos últimos 90 dias indicam que a gestão contínua de patches permanece necessária.

CVE-2020-9124—There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vuEPSS 0.9%CVE-2021-37011—There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bEPSS 0.9%CVE-2021-22434—There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious codeEPSS 0.9%CVE-2021-40032—The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentiaEPSS 0.9%CVE-2021-22429—There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executeEPSS 0.9%CVE-2021-37045—There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedlEPSS 0.9%CVE-2021-22432—There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-oEPSS 0.9%CVE-2021-22403—There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attaEPSS 0.9%CVE-2019-19417—The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabiliEPSS 0.9%CVE-2019-19416—The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabiliEPSS 0.9%CVE-2019-19415—The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit these three vulnerabiliEPSS 0.9%CVE-2020-9254—HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versEPSS 0.9%CVE-2021-37128—HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.EPSS 0.9%CVE-2021-22433—There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executeEPSS 0.9%CVE-2021-22426—There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executeEPSS 0.9%CVE-2021-22404—There is a Directory traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentEPSS 0.9%CVE-2021-37078—There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote Denial of EPSS 0.9%CVE-2021-37049—There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memorEPSS 0.9%CVE-2019-5237—Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. SucceEPSS 0.9%CVE-2019-5238—Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability. SucceEPSS 0.9%