Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

21 records in Fusionsphere Openstack · all components

TI-2017-05710 CVE-2017-8135 · GHSA-fx8w-7fwc-6r2c

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01423 Published 2017-11-22 No fix listed CWE-77
TI-2017-05709 CVE-2017-8134 · GHSA-37fm-24w3-h7fh

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77
TI-2017-05707 CVE-2017-8132 · GHSA-r7gj-ggxh-qx78

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77
TI-2017-05706 CVE-2017-8131 · GHSA-hj55-5hx3-fvj5

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 41

The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command injection vulnerability due to the insufficient input validation on four TCP listening ports.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01366 Published 2017-11-22 No fix listed CWE-77
TI-2017-05770 CVE-2017-8195 · GHSA-6h4q-p2hp-mmhq

Improper authentication in Huawei FusionSphere OpenStack

Priority MEDIUM 40

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01173 Published 2017-11-22 No fix listed CWE-287
TI-2017-05769 CVE-2017-8194 · GHSA-6382-9wrq-f6w4

Improper authentication in Huawei FusionSphere OpenStack

Priority MEDIUM 40

The FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01209 Published 2017-11-22 No fix listed CWE-287
TI-2017-01961 CVE-2017-2719 · GHSA-j4p9-45hp-4p8p

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 40

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00923 Published 2017-11-22 No fix listed CWE-77
TI-2017-01960 CVE-2017-2718 · GHSA-f558-4253-rc39

Command injection in Huawei FusionSphere OpenStack

Priority MEDIUM 40

FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00907 Published 2017-11-22 No fix listed CWE-77
TI-2017-05768 CVE-2017-8193 · GHSA-54gh-5r45-9v33

Command injection in Huawei FusionSphere OpenStack

Priority LOW 36

The FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00865 Published 2017-11-22 No fix listed CWE-77
TI-2017-05763 CVE-2017-8188 · GHSA-q8h6-q93m-28h6

Command injection in Huawei FusionSphere OpenStack

Priority LOW 35

FusionSphere OpenStack V100R006C00SPC102(NFV)has a command injection vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01681 Published 2017-11-22 No fix listed CWE-77
TI-2017-01956 CVE-2017-2714 · GHSA-734h-9hhw-9mwm

Memory corruption in Huawei FusionSphere OpenStack

Priority LOW 35

The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00515 Published 2017-11-22 No fix listed CWE-119
TI-2017-05764 CVE-2017-8189 · GHSA-2r4j-j57m-5qmc

Path traversal in Huawei FusionSphere OpenStack

Priority LOW 27

FusionSphere OpenStack V100R006C00SPC102(NFV)has a path traversal vulnerability.

CVSS 3.0MEDIUM 6.0 Local High privileges No interaction EPSS 0.0028 Published 2017-11-22 No fix listed CWE-22
TI-2017-11234 CVE-2017-15321 · GHSA-wj5v-7qmm-hqcg

Information disclosure in Huawei FusionSphere OpenStack

Priority LOW 19

Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.00606 Published 2017-12-22 No fix listed CWE-200
Open these records in search →