Huawei

Records2425All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical233CVSS 9.0–10.0

CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV

TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2019-01829 Android Kernel Use-After-Free Vulnerability CRITICAL 93KEV 2021-11-03 TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

18 records in Uma · all components

TI-2016-06110 CVE-2016-7109 · GHSA-qc83-7v7m-hrrc

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers…

MEDIUM 48

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03536 Published 2016-09-07 No fix listed CWE-94

TI-2016-06111 CVE-2016-7110 · GHSA-cpcv-4q8j-mrgm

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers…

MEDIUM 47

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0271 Published 2016-09-07 No fix listed CWE-94

TI-2017-05697 CVE-2017-8122 · GHSA-75c3-x5gg-g283

Improper input validation in Huawei UMA

MEDIUM 45

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01345 Published 2017-11-22 No fix listed CWE-20

TI-2017-05704 CVE-2017-8129 · GHSA-382h-3vwf-5x2j

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05703 CVE-2017-8128 · GHSA-h469-5354-xh9r

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05701 CVE-2017-8126 · GHSA-4q96-97v6-xq9v

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05699 CVE-2017-8124 · GHSA-8ww7-558h-f84p

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05698 CVE-2017-8123 · GHSA-9j86-9cgr-74r4

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05695 CVE-2017-8120 · GHSA-3fq4-qf4h-j7fg

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05694 CVE-2017-8119 · GHSA-v659-hwgr-274g

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2017-11-22 No fix listed CWE-20

TI-2017-05692 CVE-2017-8117 · GHSA-w54p-4v2h-pg5m

Improper input validation in Huawei UMA

MEDIUM 44

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01106 Published 2017-11-22 No fix listed CWE-20

TI-2016-06108 CVE-2016-7107 · GHSA-v5fv-jp8m-f4g2

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote…

LOW 35

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01205 Published 2016-09-07 No fix listed CWE-284

TI-2016-06109 CVE-2016-7108 · GHSA-m74m-xhqj-whgq

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote…

LOW 31

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01129 Published 2016-09-07 No fix listed CWE-200

TI-2017-05705 CVE-2017-8130 · GHSA-34p4-pf9q-p32p

Information disclosure in Huawei UMA

LOW 30

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00732 Published 2017-11-22 No fix listed CWE-200

TI-2017-05702 CVE-2017-8127 · GHSA-mmv9-w55c-wx5c

Cross-site scripting in Huawei UMA

LOW 28

The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2017-11-22 No fix listed CWE-79

TI-2017-05700 CVE-2017-8125 · GHSA-vm7v-j34j-7x3q

Cross-site scripting in Huawei UMA

LOW 28

The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2017-11-22 No fix listed CWE-79

TI-2017-05696 CVE-2017-8121 · GHSA-42mr-7g8f-rcxc

Information disclosure in Huawei UMA

LOW 25

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00749 Published 2017-11-22 No fix listed CWE-200

TI-2017-05693 CVE-2017-8118 · GHSA-6c89-7p97-7956

Information disclosure in Huawei UMA

LOW 12

The UMA product with software V200R001 and V300R001 has an information leak vulnerability.

CVSS 3.0LOW 2.3 Local High privileges No interaction EPSS 0.0023 Published 2017-11-22 No fix listed CWE-200

Open these records in search →