Vulnerabilities > Huawei

DATE CVE VULNERABILITY TITLE RISK
2022-01-10 CVE-2021-40041 Cross-site Scripting vulnerability in Huawei Ws318N-21 Firmware 10.0.2.2/10.0.2.5/10.0.2.6
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings.
local
low complexity
huawei CWE-79
4.2
2022-01-03 CVE-2021-37098 Unspecified vulnerability in Huawei Harmonyos
Hilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this vulnerability may cause application crash.
network
low complexity
huawei
7.5
2022-01-03 CVE-2021-37110 Unspecified vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
network
low complexity
huawei
7.5
2022-01-03 CVE-2021-37111 Allocation of Resources Without Limits or Throttling vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.
network
low complexity
huawei CWE-770
7.5
2022-01-03 CVE-2021-37112 Exposure of Resource to Wrong Sphere vulnerability in Huawei Harmonyos
Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.
network
low complexity
huawei CWE-668
5.3
2022-01-03 CVE-2021-37113 Unspecified vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
network
low complexity
huawei
7.5
2022-01-03 CVE-2021-37114 Out-of-bounds Read vulnerability in Huawei Emui, Harmonyos and Magic UI
There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
network
low complexity
huawei CWE-125
5.3
2022-01-03 CVE-2021-37116 Improper Input Validation vulnerability in Huawei Harmonyos
PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.
network
low complexity
huawei CWE-20
critical
9.1
2022-01-03 CVE-2021-37117 Unspecified vulnerability in Huawei Emui, Harmonyos and Magic UI
There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
network
low complexity
huawei
7.5
2022-01-03 CVE-2021-37118 Improper Handling of Exceptional Conditions vulnerability in Huawei Harmonyos
The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak.
network
low complexity
huawei CWE-755
5.3