Vulnerabilities

TI-2021-17245 CVE-2021-40033 · GHSA-qf3v-wv2c-rv42

There is an information exposure vulnerability on several Huawei Products.

LOW 24

There is an information exposure vulnerability on several Huawei Products.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00169 Published 2022-01-31 No fix listed

TI-2021-17254 CVE-2021-40042 · GHSA-2grq-h2qw-x3px

There is a release of invalid pointer vulnerability in some Huawei products, successful…

LOW 30

There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00562 Published 2022-01-31 No fix listed CWE-763

TI-2021-17220 CVE-2021-40008 · GHSA-2c7w-qmwm-xgjp

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine…

LOW 34

There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-12-13 No fix listed CWE-772

TI-2021-17188 CVE-2021-39976 · GHSA-qjh4-6fwh-rj27

There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600.

LOW 33

There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2021-11-23 No fix listed

TI-2021-15195 CVE-2021-37122 · GHSA-mp8g-xgjg-4566

Use after free in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800

LOW 28

There is a use-after-free (UAF) vulnerability in Huawei products.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00268 Published 2021-10-27 No fix listed CWE-416

TI-2021-05302 CVE-2021-22328 · GHSA-gw32-cjfh-w92v

There is a denial of service vulnerability in some huawei products.

LOW 34

There is a denial of service vulnerability in some huawei products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-08-23 No fix listed

TI-2021-05335 CVE-2021-22362 · GHSA-6fwf-v5gg-p629

Out-of-bounds write in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine…

LOW 25

There is an out of bounds write vulnerability in some Huawei products.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00685 Published 2021-05-27 No fix listed CWE-787

TI-2021-05306 CVE-2021-22332 · GHSA-g9cv-62xc-fj2v

Double free in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800

LOW 34

There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-04-28 No fix listed CWE-415

TI-2020-01796 CVE-2020-1865 · GHSA-vpxx-wvjv-769j

Out-of-bounds read in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800

LOW 29

There is an out-of-bounds read vulnerability in Huawei CloudEngine products.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00337 Published 2021-01-13 No fix listed CWE-125

TI-2020-07360 CVE-2020-9207 · GHSA-g8q3-q7hj-qv33

Improper authentication in Huawei CloudEngine 12800

LOW 35

There is an improper authentication vulnerability in some verisons of Huawei CloudEngine product.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00566 Published 2020-12-29 No fix listed CWE-287

TI-2020-07306 CVE-2020-9094 · GHSA-fwj9-5x88-wxr5

Out-of-bounds read in Huawei CloudEngine 12800

LOW 34

There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2020-12-29 No fix listed CWE-125

TI-2020-07334 CVE-2020-9124 · GHSA-3rff-xjq9-pg37

Memory leak in Huawei CloudEngine 12800

LOW 35

There is a memory leak vulnerability in some versions of Huawei CloudEngine product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00928 Published 2020-12-29 No fix listed CWE-401

TI-2020-07339 CVE-2020-9137 · GHSA-2v2m-677r-5j24

Improper input validation in CloudEngine 12800;CloudEngine 5800;CloudEngine…

LOW 29

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00215 Published 2020-12-24 No fix listed CWE-20

TI-2020-07313 CVE-2020-9102 · GHSA-4mqr-g5p6-c895

There is a information leak vulnerability in some Huawei products, and it could allow a…

LOW 15

There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00199 Published 2020-07-17 No fix listed

TI-2017-12675 CVE-2017-17301 · GHSA-7vg8-9cq4-jmgg

Improper certificate validation in Huawei…

MEDIUM 44

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R00…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2018-02-15 No fix listed CWE-295

TI-2017-11262 CVE-2017-15349 · GHSA-hqf3-w8jr-9qmr

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine…

LOW 35

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEng…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00948 Published 2018-02-15 No fix listed CWE-772

TI-2017-05722 CVE-2017-8147 · GHSA-ggq6-wxw8-wjcm

Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine…

LOW 35

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with so…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2017-11-22 No fix listed CWE-20

TI-2016-07240 CVE-2016-8795 · GHSA-6mgj-42g3-xvww

Integer overflow in CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine…

LOW 29

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R00…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01185 Published 2017-04-02 No fix listed CWE-190

TI-2016-07235 CVE-2016-8790 · GHSA-cj35-9pcq-xm7q

Memory corruption in CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,CloudEngine…

LOW 26

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200…

CVSS 3.0MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00482 Published 2017-04-02 No fix listed CWE-119

Vulnerabilities

Filters