Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Mate 20 X Firmware · all components

TI-2019-06941 CVE-2019-9506 · GHSA-5xj4-2499-67mw

Cryptographic flaw in Bluetooth BR/EDR

Priority MEDIUM 40

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.02691 Published 2019-08-14 Partial fix CWE-310
TI-2020-07388 CVE-2020-9247 · GHSA-c423-vwh6-449m

Buffer overflow in Huawei HONOR 20 PRO

Priority LOW 36

There is a buffer overflow vulnerability in several Huawei products.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00828 Published 2020-12-07 Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) +23 CWE-120
Priority LOW 30

HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions earlier than 10.1.0.273…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00233 Published 2020-08-11 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.160(C00E160R2P8) +6
TI-2019-03656 CVE-2019-5221 · GHSA-92v3-xfvv-5c39

Path traversal in Huawei Mate 20 X

Priority LOW 29

There is a path traversal vulnerability on Huawei Share.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00468 Published 2019-07-10 No fix listed CWE-22
Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.333(C00E333R2P1T8), 9.1.0.300(C432E4R1P9T8) +63 CWE-20
Priority LOW 24

There are two denial of service vulnerabilities on some Huawei smartphones.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00323 Published 2020-04-27 Fixed in 9.1.0.215(C432E1R1P1T8), 9.1.0.213(C185E1R1P1T8) +63 CWE-20
Priority LOW 21

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAW…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00214 Published 2020-02-17 Fixed in 10.0.0.180(C185E6R3P3), 10.0.0.180(C432E6R1P7) +4
Priority LOW 21

There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.00223 Published 2019-07-10 No fix listed CWE-863
TI-2020-07393 CVE-2020-9252 · GHSA-9v6x-99vx-fw68

Path traversal in HUAWEI Mate 20

Priority LOW 11

HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Honor Magic2 smartphones…

CVSS 3.1LOW 2.3 Local High privileges No interaction EPSS 0.00225 Published 2020-07-17 Fixed in 10.1.0.160(C00E160R3P8), 10.1.0.135(C00E135R2P8) +2 CWE-22
Open these records in search →