Read the docs

Huawei

Records2425All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical233CVSS 9.0–10.0
CVSS high1109CVSS 7.0–8.9

Exploited now

Huawei records in CISA KEV
TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2019-00485 Microsoft Remote Desktop Services Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-01829 Android Kernel Use-After-Free Vulnerability Priority CRITICAL 93KEV 2021-11-03TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability Priority CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Harmonyos 1050 records HIGH Emui 811 records HIGH Magic Ui 276 records HIGH Secospace Usg6600 Firmware 88 records MEDIUM Dp300 Firmware 87 records MEDIUM Te60 Firmware 83 records MEDIUM Usg9500 Firmware 81 records MEDIUM Te30 Firmware 77 records MEDIUM

Records

81 records in Usg9500 Firmware · all components

TI-2016-03941 CVE-2016-4576 · GHSA-fjg3-w56q-6wxp

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the…

Priority MEDIUM 47

Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with softw…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02383 Published 2016-05-23 No fix listed CWE-119
TI-2020-07310 CVE-2020-9099 · GHSA-pch4-qpxr-f8xh

Improper authentication in IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace…

Priority MEDIUM 44

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00876 Published 2020-06-08 No fix listed CWE-287
TI-2014-07414 CVE-2014-9137 · GHSA-8753-fcrc-w2vr

Cross-site request forgery in USG9500,USG2100,USG2200,USG5100,USG5500, USG9500…

Priority LOW 38

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SP…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00403 Published 2017-04-02 No fix listed CWE-352
TI-2019-14007 CVE-2019-19417 · GHSA-9x5v-rw99-vj9p

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14006 CVE-2019-19416 · GHSA-8r4v-2w37-8c23

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14005 CVE-2019-19415 · GHSA-6m69-cx8h-87x2

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2017-12649 CVE-2017-17255 · GHSA-9h9v-q7wx-w3hm

NULL pointer dereference in Huawei AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160…

Priority LOW 35

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R00…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2018-04-24 No fix listed CWE-476
TI-2017-12601 CVE-2017-17157 · GHSA-r8jc-74qc-rv5x

Improper input validation in Huawei…

Priority LOW 35

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20S…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00908 Published 2018-02-15 No fix listed CWE-20
TI-2017-12600 CVE-2017-17156 · GHSA-mw22-872c-w4mf

Improper input validation in Huawei…

Priority LOW 35

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20S…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00908 Published 2018-02-15 No fix listed CWE-20
TI-2017-12599 CVE-2017-17155 · GHSA-2fv6-hp2w-qhgh

Out-of-bounds write in Huawei…

Priority LOW 35

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20S…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00908 Published 2018-02-15 No fix listed CWE-787
TI-2017-12598 CVE-2017-17154 · GHSA-gm6r-jwg4-p7wh

Improper input validation in Huawei…

Priority LOW 35

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20S…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00908 Published 2018-02-15 No fix listed CWE-20
TI-2017-12597 CVE-2017-17153 · GHSA-w63h-7hq2-f36c

Improper input validation in Huawei…

Priority LOW 35

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20S…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00908 Published 2018-02-15 No fix listed CWE-20
TI-2017-05742 CVE-2017-8167 · GHSA-m4m3-4cv6-v52c

Improper input validation in Huawei USG9500

Priority LOW 35

Huawei firewall products USG9500 V500R001C50 has a DoS vulnerability.A remote attacker who controls the peer device could exploit the vulnerability by sending malformed IKE packets to the target device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01295 Published 2017-11-22 No fix listed CWE-20
TI-2016-03942 CVE-2016-4577 · GHSA-v5q4-qq7p-9vw8

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace…

Priority LOW 35

Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of…

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00997 Published 2016-05-23 No fix listed CWE-119
TI-2021-15202 CVE-2021-37129 · GHSA-53hh-mvr7-x3hp

Out-of-bounds write in IIPS Module;NGFW…

Priority LOW 34

There is an out of bounds write vulnerability in some Huawei products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-10-27 No fix listed CWE-787
Load more
Open these records in search →