Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

15 records in Manageone · all components

TI-2019-11040 CVE-2019-14835 · GHSA-h3vw-f6h8-86mg

Buffer overflow in Linux kernel

Priority LOW 35

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00622 Published 2019-09-17 Fixed CWE-120
TI-2020-07326 CVE-2020-9115 · GHSA-9cmh-vcwr-g56w

Improper input validation in ManageOne

Priority LOW 34

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01378 Published 2020-11-30 No fix listed CWE-20
TI-2019-03718 CVE-2019-5289 · GHSA-4g65-5v3f-q9xx

Out-of-bounds read in ManageOne

Priority LOW 34

Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet length.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2019-11-13 No fix listed CWE-125
TI-2021-05286 CVE-2021-22311 · GHSA-j5x5-8m8g-qv9p

Incorrect default permissions in ManageOne

Priority LOW 33

There is an improper permission assignment vulnerability in Huawei ManageOne product.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00751 Published 2021-03-22 No fix listed CWE-276
TI-2021-05370 CVE-2021-22397 · GHSA-4g2x-v66g-vw9g

Improper input validation in ManageOne

Priority LOW 29

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00173 Published 2021-08-02 No fix listed CWE-20
TI-2020-07358 CVE-2020-9205 · GHSA-c52j-mfvx-x96x

CSV injection in ManageOne

Priority LOW 23

There has a CSV injection vulnerability in ManageOne 8.0.1.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00632 Published 2021-02-06 No fix listed CWE-1236
TI-2021-05314 CVE-2021-22340 · GHSA-4wqw-j3vx-3hwj

Race condition in ManageOne;SMC2.0

Priority LOW 18

There is a multiple threads race condition vulnerability in Huawei product.

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00114 Published 2021-06-29 No fix listed CWE-362
TI-2020-01793 CVE-2020-1862 · GHSA-4vfv-mh26-wcj7

Double free in CampusInsight;ManageOne

Priority LOW 15

There is a double free vulnerability in some Huawei products.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00189 Published 2020-03-20 No fix listed CWE-415
Open these records in search →