Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9
Exploited now
Huawei records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.06052 · Published 2020-02-13 · No fix listed CWE-682
Priority LOW 30
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00605 · Published 2020-07-17 · Fixed in 10.1.0.150(C00E136R5P3)
Priority LOW 29
There is an improper authorization vulnerability in several smartphones.
CVSS 3.1MEDIUM 6.6· Physical · Low privileges · No interaction · EPSS 0.00197 · Published 2020-03-20 · Fixed in 10.0.0.188(C00E74R3P8), 10.0.0.203(C00E202R7P2) CWE-863
Priority LOW 27
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects.
CVSS 3.1MEDIUM 6.2· Physical · High privileges · No interaction · EPSS 0.00227 · Published 2020-12-24 · Fixed in 10.0.0.189(C185E6R1P3), 10.1.0.156(C00E155R7P2) +2
Priority LOW 26
There is an improper authentication vulnerability in several smartphones.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00591 · Published 2020-04-10 · Fixed in 10.0.0.205(C00E202R7P2), 10.0.0.205(C00E201R7P2) CWE-287
Priority LOW 24
HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00215 · Published 2020-07-06 · Fixed in 10.1.0.150(C00E136R5P3) CWE-287
Priority LOW 21
There is an improper authentication vulnerability in several smartphones.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00245 · Published 2020-03-20 · Fixed in 10.0.0.188(C00E74R3P8), 10.0.0.203(C00E202R7P2) CWE-287
Priority LOW 21
There is an improper authentication vulnerability in several smartphones.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00245 · Published 2020-03-20 · Fixed in 10.0.0.188(C00E74R3P8), 10.0.0.203(C00E202R7P2) CWE-287
Priority LOW 12
There is a logic error vulnerability in several smartphones.
CVSS 3.1LOW 2.4· Physical · No auth · No interaction · EPSS 0.00214 · Published 2020-03-20 · Fixed in 10.0.0.188(C00E74R3P8), 10.0.0.203(C00E202R7P2)
THREATIST.IORead the docs