Huawei

Records2425All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical233CVSS 9.0–10.0

CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2019-01829 Android Kernel Use-After-Free Vulnerability CRITICAL 93KEV 2021-11-03 TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

8 records in S2300 Firmware · all components

TI-2019-03714 CVE-2019-5285 · GHSA-6wj3-8j92-9vqj

Improper input validation in Huawei S12700, S12700, S12700, S12700, S12700, S12700…

LOW 36

Some Huawei S series switches have a DoS vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01656 Published 2019-06-04 No fix listed CWE-20

TI-2015-07137 CVE-2015-8676 · GHSA-hv98-6974-7f6f

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus…

LOW 36

Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01322 Published 2016-04-14 No fix listed CWE-119

TI-2017-12609 CVE-2017-17165 · GHSA-rr24-pwwf-78vh

Out-of-bounds read in Huawei Quidway S2700,Quidway S5300,Quidway…

LOW 35

IPv6 function in Huawei Quidway S2700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, S2300 V200R003C00, V200R003C00SPC300T, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R0…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2018-02-15 No fix listed CWE-125

TI-2017-05722 CVE-2017-8147 · GHSA-ggq6-wxw8-wjcm

Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine…

LOW 35

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with so…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2017-11-22 No fix listed CWE-20

TI-2015-03318 CVE-2015-3913 · GHSA-9mrr-8f9q-w3jv

The IP stack in multiple Huawei Campus series switch models allows remote attackers to…

LOW 35

The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00943 Published 2017-06-08 No fix listed CWE-20

TI-2014-02582 CVE-2014-3223 · GHSA-6fj6-6gxr-v5gm

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with…

LOW 35

Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0101 Published 2017-04-02 No fix listed CWE-19

TI-2015-07138 CVE-2015-8677 · GHSA-m83m-mp3r-h4c3

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with…

LOW 31

Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with s…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01114 Published 2016-04-14 No fix listed CWE-399

TI-2014-04396 CVE-2014-5394 · GHSA-ghjw-c2v5-8vjh

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors…

LOW 30

Multiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors involving use of SSH by the maintenance terminal.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01734 Published 2018-01-08 No fix listed CWE-200

Open these records in search →

Critical	233
High	1109
Medium	979
Low	104
No CVSS	0