Huawei

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-8768 1Huawei 3Honor 6 Firmware Honor 6 Plus FirmwareHonor 7 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege.
CVE-2016-8764 1Huawei 3P8 Lite Firmware P9 FirmwareP9 Lite Firmware May 13, 2026 Apr 2, 2017 N/A· v4 6.4 MEDIUM· v3 4.1 MEDIUM· v2 The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions h...Show more The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.Show less
CVE-2016-8763 1Huawei 3P8 Lite Firmware P9 FirmwareP9 Lite Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions h...Show more The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.Show less
CVE-2016-8762 1Huawei 3P8 Lite Firmware P9 FirmwareP9 Lite Firmware May 13, 2026 Apr 2, 2017 N/A· v4 5.0 MEDIUM· v3 1.9 LOW· v2 The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions h...Show more The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.Show less
CVE-2016-8761 1Huawei 3Honor 6 Firmware P9 FirmwareP9 Plus Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash th...Show more Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.Show less
CVE-2016-8760 1Huawei 3Honor 6 Firmware P9 FirmwareP9 Plus Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which allows attackers to cra...Show more Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege.Show less
CVE-2016-8759 1Huawei 3Honor 6 Firmware P9 FirmwareP9 Plus Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash th...Show more Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.Show less
CVE-2016-8758 1Huawei 1Mate 8 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions all...Show more ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).Show less
CVE-2016-8757 1Huawei 1P9 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows...Show more ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory.Show less
CVE-2016-8756 1Huawei 1Mate 8 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions al...Show more ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart).Show less
CVE-2016-8754 1Huawei 1Oceanstor 5600 V3 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.5 HIGH· v3 5.4 MEDIUM· v2 Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded...Show more Huawei OceanStor 5600 V3 V300R003C00 has a hardcoded SSH key vulnerability; the hardcoded keys are used to encrypt communication data and authenticate different nodes of the devices. An attacker may obtain the hardcoded keys and log in to such a device through SSH.Show less
CVE-2016-8275 1Huawei 1Anyoffice May 13, 2026 Apr 2, 2017 N/A· v4 6.5 MEDIUM· v3 3.5 LOW· v2 Huawei AnyOffice V200R006C00 could allow an authenticated, remote attacker to cause the software to deny services by uploading an XML bomb.
CVE-2016-8274 1Huawei 1Hisuite May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.
CVE-2016-8273 1Huawei 1Hisuite May 13, 2026 Apr 2, 2017 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack t...Show more Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise the PC.Show less
CVE-2016-8272 1Huawei 1Hisuite May 13, 2026 Apr 2, 2017 N/A· v4 5.3 MEDIUM· v3 2.1 LOW· v2 Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.
CVE-2016-8271 1Huawei 1Espace Iad Firmware May 13, 2026 Apr 2, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL.
CVE-2016-6177 1Huawei 1Oceanstor 5800 V3 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 The Huawei OceanStor 5800 V300R003C00 has an integer overflow vulnerability. An authenticated attacker may send massive abnormal Network File System (NFS) packets, causing an anomaly in specific disk arrays.
CVE-2016-2404 1Huawei 6Acu2 Firmware S12700 FirmwareS5700 Firmware+3 more May 13, 2026 Apr 2, 2017 N/A· v4 7.5 HIGH· v3 6.0 MEDIUM· v2 Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V2...Show more Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables Authentication, Authorization, and Accounting (AAA) for permission control and user permissions are not appropriate, AAA users may obtain the virtual type terminal (VTY) access permission, resulting in privilege escalation.Show less
CVE-2015-8671 1Huawei 1Logcenter May 13, 2026 Apr 2, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions.
CVE-2015-8670 1Huawei 1Logcenter May 13, 2026 Apr 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service.

Previous 1...107108109...117 Next