Vulnerabilities (CVE)

Filtered by vendor Huawei Subscribe
Total 1867 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48288 1 Huawei 2 Emui, Harmonyos 2023-02-16 N/A 7.5 HIGH
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-48289 1 Huawei 2 Emui, Harmonyos 2023-02-16 N/A 7.5 HIGH
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-29793 1 Huawei 3 Emui, Harmonyos, Magic Ui 2023-02-10 5.0 MEDIUM 7.5 HIGH
There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
CVE-2022-47975 1 Huawei 2 Emui, Harmonyos 2023-02-09 N/A 7.5 HIGH
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.
CVE-2020-1879 1 Huawei 12 Hege-560, Hege-560 Firmware, Hege-570 and 9 more 2023-02-03 3.6 LOW 3.9 LOW
There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).
CVE-2020-1878 1 Huawei 2 Oxfords-an00a, Oxfords-an00a Firmware 2023-02-03 2.1 LOW 5.5 MEDIUM
Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
CVE-2021-46789 1 Huawei 2 Emui, Magic Ui 2023-02-01 5.0 MEDIUM 7.5 HIGH
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
CVE-2021-40052 1 Huawei 3 Emui, Harmonyos, Magic Ui 2023-01-19 7.8 HIGH 7.5 HIGH
There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect availability.
CVE-2022-46762 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 7.5 HIGH
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.
CVE-2022-46761 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 7.5 HIGH
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.
CVE-2022-47974 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 6.5 MEDIUM
The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.
CVE-2022-47976 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 7.5 HIGH
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.
CVE-2021-46868 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 7.5 HIGH
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2021-46867 1 Huawei 2 Emui, Harmonyos 2023-01-12 N/A 7.5 HIGH
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
CVE-2022-41579 1 Huawei 2 Hota-fara-b19, Hota-fara-b19 Firmware 2023-01-06 N/A 6.5 MEDIUM
There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band.
CVE-2022-44564 1 Huawei 2 Aslan-al10, Aslan-al10 Firmware 2023-01-06 N/A 7.8 HIGH
Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources.
CVE-2022-46740 1 Huawei 2 Ws7100-20, Ws7100-20 Firmware 2023-01-05 N/A 6.5 MEDIUM
There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exploit could cause a denial of service (DoS) condition.
CVE-2022-39012 1 Huawei 2 Aslan-al10, Aslan-al10 Firmware 2023-01-05 N/A 7.5 HIGH
Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal.
CVE-2022-41591 1 Huawei 2 Emui, Harmonyos 2022-12-29 N/A 7.5 HIGH
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files.
CVE-2022-41590 1 Huawei 1 Harmonyos 2022-12-29 N/A 5.5 MEDIUM
Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability.