Vulnerabilities

TI-2021-15202 CVE-2021-37129 · GHSA-53hh-mvr7-x3hp

Out-of-bounds write in IIPS Module;NGFW…

LOW 34

There is an out of bounds write vulnerability in some Huawei products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00677 Published 2021-10-27 No fix listed CWE-787

TI-2021-05330 CVE-2021-22357 · GHSA-w9mq-c2pg-qc2x

Improper input validation in S12700;S5700;S6700;S7700

LOW 34

There is a denial of service vulnerability in Huawei products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00696 Published 2021-08-23 No fix listed CWE-20

TI-2021-05303 CVE-2021-22329 · GHSA-r7gg-qqgh-p46p

There has a license management vulnerability in some Huawei products.

LOW 23

There has a license management vulnerability in some Huawei products.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00471 Published 2021-06-29 No fix listed

TI-2021-05350 CVE-2021-22377 · GHSA-4q3p-mjvg-jp72

Improper input validation in S12700;S2700;S5700;S6700;S7700

LOW 33

There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00917 Published 2021-06-22 No fix listed CWE-20

TI-2021-05295 CVE-2021-22321 · GHSA-p3qf-gvrh-m63f

Use after free in NIP6600;NIP6800;S12700;S1700;S2700;S5700;S6700;S7700;S9700;Secospace…

LOW 25

There is a use-after-free vulnerability in a Huawei product.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00741 Published 2021-03-22 No fix listed CWE-416

TI-2020-01797 CVE-2020-1866 · GHSA-xf3h-cpcr-5vv3

Out-of-bounds read in NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace…

LOW 29

There is an out-of-bounds read vulnerability in several products.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00355 Published 2021-01-13 No fix listed CWE-125

TI-2019-13999 CVE-2019-19397 · GHSA-c9p4-g3wp-gpxv

There is a weak algorithm vulnerability in some Huawei products.

LOW 34

There is a weak algorithm vulnerability in some Huawei products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00764 Published 2019-12-13 No fix listed

TI-2019-03714 CVE-2019-5285 · GHSA-6wj3-8j92-9vqj

Improper input validation in Huawei S12700, S12700, S12700, S12700, S12700, S12700…

LOW 36

Some Huawei S series switches have a DoS vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01656 Published 2019-06-04 No fix listed CWE-20

TI-2017-11240 CVE-2017-15327 · GHSA-943p-33cc-x6w3

Information disclosure in Huawei S12700, S7700, S9700

LOW 21

S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00,…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0048 Published 2018-04-11 No fix listed CWE-200

TI-2016-07233 CVE-2016-8786 · GHSA-v32r-xrgh-2vx8

Improper input validation in Huawei S12700, S5700, S6700, S7700, S9700

LOW 36

Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R007C00, V200R0…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01732 Published 2018-03-09 No fix listed CWE-20

TI-2016-07232 CVE-2016-8785 · GHSA-w6f4-9255-g83f

Improper input validation in Huawei S12700, S5700, S7700, S9700

LOW 22

Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00812 Published 2018-03-09 No fix listed CWE-20

TI-2017-12644 CVE-2017-17250 · GHSA-2mqx-vr27-49pv

Out-of-bounds write in Huawei AR120-S; AR1200; AR1200-S; AR150; AR150-S; AR160; AR200…

LOW 31

Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R005C32; AR200-S V200R005C32; AR2200-S V200R005C32; AR3200 V200R005C32; V200R007C…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01038 Published 2018-03-09 No fix listed CWE-787

TI-2017-12585 CVE-2017-17141 · GHSA-m2pg-4f6c-443v

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20…

LOW 19

Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00; V200R006C00; V200R006C10; V200R007C00; V…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.00706 Published 2018-03-05 No fix listed CWE-772

TI-2017-12582 CVE-2017-17138 · GHSA-9274-jv3g-h7g3

Improper input validation in Huawei DP300; IPS Module; NGFW Module; NIP6300; NIP6600…

LOW 24

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2018-03-05 No fix listed CWE-20

TI-2017-12581 CVE-2017-17137 · GHSA-jv42-wvpp-33q5

Out-of-bounds read in Huawei DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200…

LOW 24

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2018-03-05 No fix listed CWE-125

TI-2017-12580 CVE-2017-17136 · GHSA-phgr-76rh-m88v

Memory corruption in Huawei DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200…

LOW 24

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2018-03-05 No fix listed CWE-119

TI-2017-12579 CVE-2017-17135 · GHSA-4q8r-j2xw-6q6f

NULL pointer dereference in Huawei DP300; IPS Module; NGFW Module; NIP6300; NIP6600…

LOW 24

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S1270…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00207 Published 2018-03-05 No fix listed CWE-476

TI-2017-12674 CVE-2017-17300 · GHSA-f4gq-h772-6crg

Improper input validation in Huawei S12700,S5700,S6700,S7700,S9700

LOW 36

Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01591 Published 2018-02-15 No fix listed CWE-20

TI-2017-11259 CVE-2017-15346 · GHSA-8gwj-7wm2-7rp8

Improper input validation in Huawei S12700, S1700,S3700,S5700,S6700,S7700, S9700…

LOW 22

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009…

CVSS 3.0MEDIUM 4.7 Local No auth User interaction EPSS 0.00485 Published 2018-02-15 No fix listed CWE-20

TI-2017-11246 CVE-2017-15333 · GHSA-89wg-4vg7-4787

Improper input validation in Huawei S12700, S1700,S3700,S5700,S6700,S7700, S9700…

LOW 22

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009…

CVSS 3.0MEDIUM 4.7 Local No auth User interaction EPSS 0.00485 Published 2018-02-15 No fix listed CWE-20

TI-2017-05722 CVE-2017-8147 · GHSA-ggq6-wxw8-wjcm

Improper input validation in Huawei AC6005,AC6605,AR1200,AR200,AR3200,CloudEngine…

LOW 35

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with so…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2017-11-22 No fix listed CWE-20

TI-2015-03318 CVE-2015-3913 · GHSA-9mrr-8f9q-w3jv

The IP stack in multiple Huawei Campus series switch models allows remote attackers to…

LOW 35

The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00943 Published 2017-06-08 No fix listed CWE-20

TI-2016-07242 CVE-2016-8797 · GHSA-c58w-fvhw-g742

Resource management flaw in AR3200,S12700,S5300,S5700,S6300,S6700,S7700,S9300,S9700…

LOW 34

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00874 Published 2017-04-02 No fix listed CWE-399

TI-2016-07222 CVE-2016-8773 · GHSA-jp56-w4w7-cm9r

Improper input validation in S5300,S5700,S6300,S6700,S7700,9300,9700,S12700 S5300 with…

LOW 35

Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00; S6300 with softwa…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00919 Published 2017-04-02 No fix listed CWE-20

TI-2016-02160 CVE-2016-2404 · GHSA-65qg-pq7p-5fvp

Access control flaw in S5700, S6700, S7700, S9700,S12700,ACU2,, S5700, S6700, S7700…

LOW 34

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V2…

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00789 Published 2017-04-02 No fix listed CWE-264

Vulnerabilities

Filters