Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

21 records in Fusioncompute · all components

TI-2020-07383 CVE-2020-9242 · GHSA-gjwq-mgpf-vhgc

Command injection in FusionCompute

Priority MEDIUM 41

FusionCompute 8.0.0 have a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01306 Published 2020-08-17 No fix listed CWE-77
TI-2020-07375 CVE-2020-9233 · GHSA-3v8h-w3v6-jj53

Improper authentication in FusionCompute

Priority MEDIUM 41

FusionCompute 8.0.0 have an insufficient authentication vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00775 Published 2020-08-17 No fix listed CWE-287
TI-2021-15176 CVE-2021-37102 · GHSA-gpc3-vjh4-7wm2

Command injection in FusionCompute

Priority MEDIUM 40

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00946 Published 2021-11-23 No fix listed CWE-77
TI-2021-15179 CVE-2021-37105 · GHSA-g2c4-qjc4-5v7v

Unrestricted file upload in FusionCompute

Priority LOW 34

There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2021-09-28 No fix listed CWE-434
TI-2020-07327 CVE-2020-9116 · GHSA-mm4v-hxm2-mccj

Command injection in FusionCompute

Priority LOW 34

Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01036 Published 2020-11-30 No fix listed CWE-77
TI-2021-15180 CVE-2021-37106 · GHSA-2r4h-9r32-83xj

Command injection in FusionCompute

Priority LOW 33

There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00898 Published 2021-09-28 No fix listed CWE-77
Priority LOW 33

FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2020-12-01 No fix listed CWE-269
Priority LOW 28

FusionCompute V100R005C00 and V100R005C10 have an improper authorization vulnerability due to improper permission settings for a certain file on the host machine.

CVSS 3.0MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00199 Published 2017-11-22 No fix listed CWE-732
TI-2021-05331 CVE-2021-22358 · GHSA-wm9w-3fvv-87q8

Improper input validation in FusionCompute

Priority LOW 21

There is an insufficient input validation vulnerability in FusionCompute 8.0.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00533 Published 2021-05-27 No fix listed CWE-20
Open these records in search →