Vulnerabilities > Huawei > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-11-22 CVE-2017-8201 Missing Release of Resource after Effective Lifetime vulnerability in Huawei products
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol.
network
low complexity
huawei CWE-772
6.5
2017-11-22 CVE-2017-8200 Out-of-bounds Read vulnerability in Huawei products
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol.
network
low complexity
huawei CWE-125
6.5
2017-11-22 CVE-2017-8199 Out-of-bounds Read vulnerability in Huawei products
MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol.
network
low complexity
huawei CWE-125
6.5
2017-11-22 CVE-2017-8196 Incorrect Authorization vulnerability in Huawei Fusionsphere V100R006C00Spc102(Nfv)
FusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability.
local
low complexity
huawei CWE-863
4.2
2017-11-22 CVE-2017-8191 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Huawei Fusionsphere Openstack V100R006C00Spc102(Nfv)
FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability.
network
high complexity
huawei CWE-327
5.9
2017-11-22 CVE-2017-8190 Improper Verification of Cryptographic Signature vulnerability in Huawei Fusionsphere Openstack V100R006C00Spc102(Nfv)
FusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic signature vulnerability.
local
low complexity
huawei CWE-347
6.7
2017-11-22 CVE-2017-8189 Path Traversal vulnerability in Huawei Fusionsphere Openstack V100R006C00Spc102(Nfv)
FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability.
local
low complexity
huawei CWE-22
6.0
2017-11-22 CVE-2017-8186 Improper Input Validation vulnerability in Huawei Mha-Al00A
The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation.
local
low complexity
huawei CWE-20
5.5
2017-11-22 CVE-2017-8184 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei MTK Platform Smart Phone Firmware Niceal00C00B155/Niceal00C00B160
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability.
local
low complexity
huawei CWE-119
5.5
2017-11-22 CVE-2017-8183 Information Exposure vulnerability in Huawei MTK Platform Smart Phone Firmware Niceal00C00B155/Niceal00C00B160
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability.
local
low complexity
huawei CWE-200
5.5