Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

31 records in Mate 20 Firmware · all components

TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310
TI-2020-07388 CVE-2020-9247 · GHSA-c423-vwh6-449m

Buffer overflow in Huawei HONOR 20 PRO

Priority LOW 36

There is a buffer overflow vulnerability in several Huawei products.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2020-12-07 Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) +23 CWE-120
TI-2019-03660 CVE-2019-5225 · GHSA-xxxq-m57r-j966

Buffer overflow in P30, Mate 20, P30 Pro

Priority LOW 36

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2019-11-29 No fix listed CWE-120
TI-2020-07324 CVE-2020-9113 · GHSA-2wjr-vfmw-3fw7

Buffer overflow in HUAWEI Mate 20

Priority LOW 35

HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00449 Published 2020-10-19 Fixed in 10.0.0.188(C00E74R3P8) CWE-120
TI-2020-07385 CVE-2020-9244 · GHSA-jx8x-69j8-c7fj

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro…

Priority LOW 30

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00233 Published 2020-08-11 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8) +6
TI-2020-07294 CVE-2020-9081 · GHSA-hc6q-5pvq-h8ff

Improper authorization in HUAWEI Mate 20

Priority LOW 29

There is an improper authorization vulnerability in some Huawei smartphones.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00202 Published 2024-12-27 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C01E160R2P8) +4 CWE-285
TI-2020-01734 CVE-2020-1796 · GHSA-xxfv-6426-45jv

Incorrect authorization in HUAWEI Mate 20;HUAWEI Mate 30 Pro

Priority LOW 29

There is an improper authorization vulnerability in several smartphones.

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00197 Published 2020-03-20 Fixed in 10.0.0.188(C00E74R3P8), 10.0.0.203(C00E202R7P2) CWE-863
TI-2020-01725 CVE-2020-1787 · GHSA-pq48-j2pq-xj5j

Improper authentication in HUAWEI Mate 20

Priority LOW 29

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability.

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00262 Published 2020-01-09 Fixed in 9.1.0.139(C00E133R3P1) CWE-287
TI-2020-01778 CVE-2020-1840 · GHSA-rf3j-pmqj-4m5q

Improper authentication in HUAWEI Mate 20

Priority LOW 26

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00222 Published 2020-01-21 Fixed in 10.0.0.175(C00E70R3P8) CWE-287
TI-2019-03732 CVE-2019-5303 · GHSA-r5q4-f6fm-933q

Improper input validation in Huawei ALP-AL00B

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
TI-2019-03731 CVE-2019-5302 · GHSA-ch39-559f-wp4m

Improper input validation in Huawei Sydney-L21

Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
TI-2019-03662 CVE-2019-5227 · GHSA-qr6w-xx8m-93mv

Origin validation error in P30, P30 Pro, Mate 20, HiSuite

Priority LOW 24

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2019-11-29 No fix listed CWE-346
TI-2019-03661 CVE-2019-5226 · GHSA-4m37-jfjg-49pc

Origin validation error in P30, P30 Pro, Mate 20, HiSuite

Priority LOW 24

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B 9.1.0.135(C00E133R2P1…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2019-11-29 No fix listed CWE-346
TI-2020-07304 CVE-2020-9092 · GHSA-2f67-h8ph-9pgr

Cross-site scripting in HUAWEI Mate 20

Priority LOW 21

HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00283 Published 2020-10-19 Fixed in 10.1.0.163(C00E160R3P8) CWE-79
TI-2020-07295 CVE-2020-9082 · GHSA-jm85-vm3h-hj2v

Information disclosure in HUAWEI Mate 20

Priority LOW 21

There is an information disclosure vulnerability in several smartphones.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00233 Published 2024-12-27 Fixed in 10.1.0.160(C00) CWE-200
TI-2019-03655 CVE-2019-5220 · GHSA-xv59-3gpf-c92h

Incorrect authorization in Huawei Mate 20 X

Priority LOW 21

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00223 Published 2019-07-10 No fix listed CWE-863
Load more
Open these records in search →