Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

83 records in Te60 Firmware · all components

Priority MEDIUM 56

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recover…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.73851 Published 2015-04-01 Partial fix CWE-327
TI-2017-12675 CVE-2017-17301 · GHSA-7vg8-9cq4-jmgg

Improper certificate validation in Huawei…

Priority MEDIUM 44

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R00…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2018-02-15 No fix listed CWE-295
Priority MEDIUM 40

DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD wi…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01207 Published 2017-11-22 No fix listed CWE-20
TI-2019-14007 CVE-2019-19417 · GHSA-9x5v-rw99-vj9p

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14006 CVE-2019-19416 · GHSA-8r4v-2w37-8c23

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14005 CVE-2019-19415 · GHSA-6m69-cx8h-87x2

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
Priority LOW 35

Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01255 Published 2018-04-19 No fix listed CWE-119
Priority LOW 35

The Light Directory Access Protocol (LDAP) clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01255 Published 2018-02-15 No fix listed CWE-400
Priority LOW 35

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R00…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2018-04-24 No fix listed CWE-476
Priority LOW 35

Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C00, eSpace U1981 V200R003C30SPC100 have a denial of service vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01255 Published 2018-02-15 No fix listed CWE-119
TI-2017-11233 CVE-2017-15320 · GHSA-864v-pq8c-hmch

Out-of-bounds read in Huawei RP200

Priority LOW 35

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilit…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2017-12-22 No fix listed CWE-125
TI-2017-11232 CVE-2017-15319 · GHSA-fx56-x2jr-24g7

Out-of-bounds read in Huawei RP200

Priority LOW 35

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilit…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2017-12-22 No fix listed CWE-125
TI-2017-11231 CVE-2017-15318 · GHSA-vwh9-3hjh-49rp

Out-of-bounds read in Huawei RP200

Priority LOW 35

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilit…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2017-12-22 No fix listed CWE-125
Priority LOW 34

Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2018-02-15 No fix listed CWE-295
Priority LOW 30

Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows phy…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00239 Published 2016-01-12 No fix listed CWE-255
Priority LOW 28

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02076 Published 2018-04-11 No fix listed CWE-20
Priority LOW 28

Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00959 Published 2018-03-09 No fix listed CWE-787
Load more
Open these records in search →