Vulnerabilities > Huawei > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-04-27 CVE-2020-9072 Unspecified vulnerability in Huawei OSD Firmware
Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability.
local
low complexity
huawei
6.7
2020-04-27 CVE-2020-1845 Unspecified vulnerability in Huawei Pcmanager
Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability.
local
low complexity
huawei
6.7
2020-04-20 CVE-2020-9070 Improper Authentication vulnerability in Huawei Taurus-Al00B Firmware 10.0.0.133(C00E132R5P1)/10.0.0.203(C00E201R7P2)/10.0.0.41(Sp2C00E41R3P2)
Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability.
local
low complexity
huawei CWE-287
5.5
2020-04-20 CVE-2020-1803 Improper Authentication vulnerability in Huawei Honor V20 Firmware
Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability.
high complexity
huawei CWE-287
5.3
2020-04-10 CVE-2020-1801 Improper Authentication vulnerability in Huawei Mate 30 Firmware and Mate 30 PRO Firmware
There is an improper authentication vulnerability in several smartphones.
local
low complexity
huawei CWE-287
5.5
2020-04-10 CVE-2020-1802 Improper Validation of Integrity Check Value vulnerability in Huawei products
There is an insufficient integrity validation vulnerability in several products.
low complexity
huawei CWE-354
4.6
2020-03-26 CVE-2020-9065 Use After Free vulnerability in Huawei Taurus-Al00B Firmware 10.0.0.133(C00E132R5P1)/10.0.0.41(Sp2C00E41R3P2)
Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability.
local
low complexity
huawei CWE-416
5.5
2020-03-20 CVE-2020-1878 Improper Authentication vulnerability in Huawei Oxfords-An00A Firmware
Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability.
local
low complexity
huawei CWE-287
5.5
2020-03-20 CVE-2020-1796 Incorrect Authorization vulnerability in Huawei Mate 20 Firmware and Mate 30 PRO Firmware
There is an improper authorization vulnerability in several smartphones.
low complexity
huawei CWE-863
6.6
2020-03-20 CVE-2020-1794 Improper Authentication vulnerability in Huawei Mate 20 Firmware and Mate 30 PRO Firmware
There is an improper authentication vulnerability in several smartphones.
low complexity
huawei CWE-287
4.6