Vulnerabilities > Huawei

DATE CVE VULNERABILITY TITLE RISK
2020-02-18 CVE-2020-1882 Incorrect Authorization vulnerability in Huawei products
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability.
local
low complexity
huawei CWE-863
2.1
2020-02-18 CVE-2020-1830 Out-of-bounds Read vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message.
network
low complexity
huawei CWE-125
5.0
2020-02-18 CVE-2020-1816 Improper Input Validation vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability.
network
huawei CWE-20
4.3
2020-02-18 CVE-2020-1815 Missing Release of Resource after Effective Lifetime vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability.
network
huawei CWE-772
4.3
2020-02-18 CVE-2020-1811 Injection vulnerability in Huawei Gaussdb 200 6.5.1
GaussDB 200 with version of 6.5.1 have a command injection vulnerability.
network
low complexity
huawei CWE-74
6.5
2020-02-17 CVE-2020-1856 Information Exposure vulnerability in Huawei products
Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability.
network
low complexity
huawei CWE-200
5.0
2020-02-17 CVE-2020-1853 Path Traversal vulnerability in Huawei Gaussdb 200 6.5.1
GaussDB 200 with version of 6.5.1 have a path traversal vulnerability.
network
low complexity
huawei CWE-22
4.0
2020-02-17 CVE-2020-1841 Information Exposure vulnerability in Huawei products
Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability.
network
low complexity
huawei CWE-200
5.0
2020-02-17 CVE-2020-1829 Double Free vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly.
network
low complexity
huawei CWE-415
5.0
2020-02-17 CVE-2020-1827 Improper Resource Shutdown or Release vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability.
network
low complexity
huawei CWE-404
5.0