Vulnerabilities > Huawei

DATE CVE VULNERABILITY TITLE RISK
2017-12-22 CVE-2017-15318 Out-of-bounds Read vulnerability in Huawei products
RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products.
network
low complexity
huawei CWE-125
7.5
2017-12-22 CVE-2017-15317 Out-of-bounds Read vulnerability in Huawei products
AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR200 V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30; AR200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR2200 V200R006C10, V200R006C13, V200R006C16, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR2200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR3200 V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30; AR510 V200R006C10, V200R006C12, V200R006C13, V200R006C15, V200R006C16, V200R006C17, V200R007C00, V200R008C20, V200R008C30; SRG1300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG2300 V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30; SRG3300 V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an input validation vulnerability in Huawei multiple products.
network
low complexity
huawei CWE-125
7.5
2017-12-22 CVE-2017-15316 Double Free vulnerability in Huawei Mate 9 Firmware and Mate 9 PRO Firmware
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability.
local
low complexity
huawei CWE-415
7.8
2017-12-22 CVE-2017-15313 Injection vulnerability in Huawei Smartcare V200R003C10
Huawei SmartCare V200R003C10 has a CSV injection vulnerability.
network
low complexity
huawei CWE-74
8.8
2017-12-22 CVE-2017-15312 Cross-site Scripting vulnerability in Huawei Smartcare V200R003C10
Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module.
network
low complexity
huawei CWE-79
5.4
2017-12-22 CVE-2017-15311 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation.
low complexity
huawei CWE-119
8.8
2017-12-22 CVE-2017-15310 Improper Input Validation vulnerability in Huawei Ireader
Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation.
network
low complexity
huawei CWE-20
6.5
2017-12-22 CVE-2017-15309 Path Traversal vulnerability in Huawei Ireader
Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths.
network
low complexity
huawei CWE-22
7.1
2017-12-22 CVE-2017-15308 Improper Input Validation vulnerability in Huawei Ireader
Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data.
network
low complexity
huawei CWE-20
8.8
2017-12-22 CVE-2017-15307 Unspecified vulnerability in Huawei Honor 8 Firmware
Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information.
local
low complexity
huawei
2.3