Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

8 records in Hisuite · all components

TI-2020-07311 CVE-2020-9100 · GHSA-rpmr-24q5-prwr

Uncontrolled search path in HiSuite

Priority LOW 34

Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00384 Published 2020-07-06 No fix listed CWE-427
TI-2016-06793 CVE-2016-8274 · GHSA-hp3x-6hh5-5jfh

Improper access control in HiSuite 4.0.5.300_OVE

Priority LOW 34

Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00269 Published 2017-04-02 No fix listed CWE-284
TI-2016-05049 CVE-2016-5821 · GHSA-6jrh-cqm6-j7wr

Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a…

Priority LOW 34

Huawei HiSuite before 4.0.4.204_ove (Out of China) and before 4.0.4.301 (China) use a weak ACL (FILE_WRITE_DATA for BUILTIN\Users) for the HiSuite service directory, which allows local users to gain SYSTEM privileges via…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00341 Published 2016-07-13 No fix listed CWE-264
TI-2016-06792 CVE-2016-8273 · GHSA-9rrp-vxfg-q78p

Improper input validation in HiSuite 4.0.5.300_OVE

Priority LOW 33

Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack t…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0021 Published 2017-04-02 No fix listed CWE-20
TI-2019-03693 CVE-2019-5263 · GHSA-5m27-xjxh-cpq9

Missing brute-force protection in HiSuite, HwBackup

Priority LOW 25

HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00307 Published 2019-11-29 No fix listed CWE-307
TI-2019-03678 CVE-2019-5245 · GHSA-r999-q7xx-m77p

Uncontrolled search path in HiSuite

Priority LOW 24

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00391 Published 2019-06-13 No fix listed CWE-427
TI-2016-06791 CVE-2016-8272 · GHSA-2vhr-xgfv-6w53

Information disclosure in HiSuite 4.0.5.300_OVE

Priority LOW 23

Huawei PC client software HiSuite 4.0.5.300_OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00207 Published 2017-04-02 No fix listed CWE-200
Open these records in search →