Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

28 records in Cloudengine 12800 Firmware · all components

Priority MEDIUM 47

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with softw…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02989 Published 2016-08-02 No fix listed CWE-20
TI-2017-12675 CVE-2017-17301 · GHSA-7vg8-9cq4-jmgg

Improper certificate validation in Huawei…

Priority MEDIUM 44

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R00…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2018-02-15 No fix listed CWE-295
Priority LOW 35

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00566 Published 2020-12-29 No fix listed CWE-287
TI-2020-07334 CVE-2020-9124 · GHSA-3rff-xjq9-pg37

Memory leak in Huawei CloudEngine 12800

Priority LOW 35

There is a memory leak vulnerability in some versions of Huawei CloudEngine product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00928 Published 2020-12-29 No fix listed CWE-401
Priority LOW 35

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with so…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2017-11-22 No fix listed CWE-20
Priority LOW 34

There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2020-12-29 No fix listed CWE-125
TI-2019-03681 CVE-2019-5248 · GHSA-v3rj-h6w7-8v5m

Memory leak in CloudEngine 12800

Priority LOW 32

CloudEngine 12800 has a DoS vulnerability.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00306 Published 2019-12-13 No fix listed CWE-401
Priority LOW 32

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the sha…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01334 Published 2017-04-02 No fix listed CWE-400
Priority LOW 26

Some Huawei products have an insufficient verification of data authenticity vulnerability.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00358 Published 2019-12-13 No fix listed CWE-345
Priority LOW 26

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200…

CVSS 3.0MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00482 Published 2017-04-02 No fix listed CWE-119
Priority LOW 26

Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01124 Published 2018-03-09 No fix listed CWE-399
Load more
Open these records in search →