Vulnerabilities > Huawei > Low

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-2739 Download of Code Without Integrity Check vulnerability in Huawei Vmall 1.5.2.0
The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP.
high complexity
huawei CWE-494
3.1
2017-11-22 CVE-2017-8118 Information Exposure vulnerability in Huawei UMA V200R001/V300R001
The UMA product with software V200R001 and V300R001 has an information leak vulnerability.
local
low complexity
huawei CWE-200
2.3
2017-09-20 CVE-2015-8224 Information Exposure vulnerability in Huawei P8 Firmware
Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (aka UE) measurements of signal strengths.
network
high complexity
huawei CWE-200
3.7
2017-04-02 CVE-2014-8571 Permissions, Privileges, and Access Controls vulnerability in Huawei products
Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier versions before V100R001C01B508SP02; EDGE-C00 V100R001C92B508SP02 and earlier versions before V100R001C92B508SP03 can capture screens without the root permission.
local
low complexity
huawei CWE-264
3.3
2017-04-02 CVE-2015-2246 Information Exposure vulnerability in Huawei P7-L10 Firmware V100R001C00B136
The MeWidget module on Huawei P7 smartphones with software P7-L10 V100R001C00B136 and earlier versions could lead to the disclosure of contact information.
local
low complexity
huawei CWE-200
3.3
2017-04-02 CVE-2016-8757 Information Exposure vulnerability in Huawei P9 Firmware
ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory.
local
low complexity
huawei CWE-200
3.3
2016-06-10 CVE-2016-5233 Information Exposure vulnerability in Huawei Mate 8 Firmware
Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base stations to obtain sensitive subscriber signal strength information via vectors involving improper security status verification, aka HWPSIRT-2015-12007.
network
high complexity
huawei CWE-200
3.7