Priority MEDIUM 56
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recover…
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.73851 · Published 2015-04-01 · Partial fix CWE-327
Priority LOW 38
Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbi…
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.0147 · Published 2016-05-23 · No fix listed CWE-20
Priority LOW 36
Some Huawei S series switches have a DoS vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01656 · Published 2019-06-04 · No fix listed CWE-20
Priority LOW 36
Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01591 · Published 2018-02-15 · No fix listed CWE-20
Priority LOW 36
Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R0…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01732 · Published 2018-03-09 · No fix listed CWE-20
Priority LOW 35
AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with so…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00965 · Published 2017-11-22 · No fix listed CWE-20
Priority LOW 35
Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with softwa…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00919 · Published 2017-04-02 · No fix listed CWE-20
Priority LOW 35
Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of malformed packets.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01096 · Published 2016-09-26 · No fix listed CWE-399
Priority LOW 35
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00943 · Published 2017-06-08 · No fix listed CWE-20
Priority LOW 34
There is an out of bounds write vulnerability in some Huawei products.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00677 · Published 2021-10-27 · No fix listed CWE-787
Priority LOW 34
There is a denial of service vulnerability in Huawei products.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00696 · Published 2021-08-23 · No fix listed CWE-20
Priority LOW 34
There is a weak algorithm vulnerability in some Huawei products.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00764 · Published 2019-12-13 · No fix listed
Priority LOW 34
Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00874 · Published 2017-04-02 · No fix listed CWE-399
Priority LOW 34
Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V2…
CVSS 3.0HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00789 · Published 2017-04-02 · No fix listed CWE-264
Priority LOW 33
There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00917 · Published 2021-06-22 · No fix listed CWE-20
Priority LOW 31
Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01038 · Published 2018-03-09 · No fix listed CWE-787
Priority LOW 29
There is an out-of-bounds read vulnerability in several products.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00355 · Published 2021-01-13 · No fix listed CWE-125
Priority LOW 25
There is a use-after-free vulnerability in a Huawei product.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00741 · Published 2021-03-22 · No fix listed CWE-416
Priority LOW 24
PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2018-03-05 · No fix listed CWE-20
Priority LOW 24
PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2018-03-05 · No fix listed CWE-125
Priority LOW 24
PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00135 · Published 2018-03-05 · No fix listed CWE-119
Priority LOW 24
PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00207 · Published 2018-03-05 · No fix listed CWE-476
Priority LOW 23
There has a license management vulnerability in some Huawei products.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00471 · Published 2021-06-29 · No fix listed
Priority LOW 23
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with softwa…
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00489 · Published 2016-10-03 · No fix listed CWE-326
Priority LOW 22
XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009…
CVSS 3.0MEDIUM 4.7· Local · No auth · User interaction · EPSS 0.00485 · Published 2018-02-15 · No fix listed CWE-20
Load more