Huawei

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-7841 1Huawei 10Fusionserver Ch121 V3 Fusionserver Ch220 V3Fusionserver Ch222 V3+7 more May 13, 2026 Oct 3, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH128...Show more The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allows remote attackers to bypass access restrictions and enter commands via unspecified parameters, as demonstrated by a "user creation command."Show less
CVE-2015-7846 1Huawei 7Ar1200 Firmware Ar200 FirmwareAr2200 Firmware+4 more May 13, 2026 Sep 25, 2017 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.
CVE-2015-6592 1Huawei 1Uap2105 Firmware May 13, 2026 Sep 25, 2017 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 Huawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell.
CVE-2015-8224 1Huawei 1P8 Firmware May 13, 2026 Sep 20, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (aka UE) measurements of signal strengths.
CVE-2015-4629 1Huawei 1E5756s Firmware May 13, 2026 Sep 7, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions.
CVE-2015-8334 1Huawei 1Vcn500 Firmware May 13, 2026 Aug 29, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
CVE-2015-8332 1Huawei 2Vcm5010 Firmware Vcm5020 Firmware May 13, 2026 Aug 28, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operati...Show more Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user via a crafted message, aka "Horizontal Privilege Escalation Vulnerability."Show less
CVE-2015-2245 1Huawei 1P7 L09 Firmware May 13, 2026 Jun 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).
CVE-2017-3216 5Greenpacket HuaweiMada+2 more 14Bm2022 Firmware Hes 309m FirmwareHes 319m2w Firmware+11 more May 13, 2026 Jun 20, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by perform...Show more WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.Show less
CVE-2015-3913 1Huawei 22S12700 Firmware S2300 FirmwareS2350ei Firmware+19 more May 13, 2026 Jun 8, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
CVE-2015-2800 1Huawei 7S5300 Firmware S5700 FirmwareS6300 Firmware+4 more May 13, 2026 Jun 8, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause...Show more The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation.Show less
CVE-2015-2255 1Huawei 1Ar1220 Firmware May 13, 2026 Jun 8, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service (board reset) via vectors involving a large amount of traffic from the GE port to the FE port.
CVE-2015-2253 1Huawei 1Oceanstor Uds Firmware May 13, 2026 Jun 8, 2017 N/A· v4 5.0 MEDIUM· v3 3.5 LOW· v2 The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document.
CVE-2015-2252 1Huawei 1Oceanstor Uds Firmware May 13, 2026 Jun 8, 2017 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts.
CVE-2015-2251 1Huawei 1Oceanstor Uds Firmware May 13, 2026 Jun 8, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript.
CVE-2015-8089 1Huawei 3P7 L00 Firmware P7 L05 FirmwareP7 L09 Firmware May 13, 2026 May 23, 2017 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and cons...Show more The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service (system crash) or gain privileges via a crafted application.Show less
CVE-2015-6586 1Huawei 3Wlan Ac6005 Firmware Wlan Ac6605 FirmwareWlan Acu2 Firmware May 13, 2026 May 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast...Show more The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.Show less
CVE-2015-8223 1Huawei 2P7 Firmware P8 Ale Ul00 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to th...Show more Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to the camera driver.Show less
CVE-2015-7740 1Huawei 2P7 Firmware P8 Ale Ul00 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted inp...Show more Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.Show less
CVE-2016-8803 1Huawei 1Fusionstorage May 13, 2026 Apr 2, 2017 N/A· v4 7.5 HIGH· v3 4.1 MEDIUM· v2 The maintenance module in Huawei FusionStorage V100R003C30U1 allows attackers to create documents according to special rules to obtain the OS root privilege of FusionStorage.

Previous 1...105106107...117 Next