Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Huawei Component: Smc2.0 Firmware Clear all filters
TI-2020-07362 CVE-2020-9209 · GHSA-wqm8-5876-3578

Missing authorization in SMC2.0

Priority LOW 29

There is a privilege escalation vulnerability in SMC2.0 product.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00215 Published 2021-01-13 No fix listed CWE-862
TI-2019-14005 CVE-2019-19415 · GHSA-6m69-cx8h-87x2

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14006 CVE-2019-19416 · GHSA-8r4v-2w37-8c23

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-14007 CVE-2019-19417 · GHSA-9x5v-rw99-vj9p

Memory corruption in Huawei AR120-S

Priority LOW 35

The SIP module of some Huawei products have a denial of service (DoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2020-07-08 No fix listed CWE-119
TI-2019-00485 CVE-2019-0708 · GHSA-fq64-gmq7-jjvg

Use after free in Microsoft Windows

Priority CRITICAL 100KEV

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2019-05-16 No fix listed CWE-416
TI-2017-12675 CVE-2017-17301 · GHSA-7vg8-9cq4-jmgg

Improper certificate validation in Huawei…

Priority MEDIUM 44

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R00…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2018-02-15 No fix listed CWE-295
TI-2017-11244 CVE-2017-15331 · GHSA-7x63-cfw4-x5rw

Out-of-bounds read in Huawei…

Priority LOW 27

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R00…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01532 Published 2018-02-15 No fix listed CWE-125
TI-2017-05788 CVE-2017-8213 · GHSA-484q-rm2r-3g72

Improper certificate validation in Huawei SMC2.0

Priority LOW 25

Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnera…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00614 Published 2017-11-22 No fix listed CWE-295
TI-2017-05738 CVE-2017-8163 · GHSA-xmhq-cq4f-9gm2

Out-of-bounds read in Huawei…

Priority LOW 30

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10,…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00795 Published 2017-11-22 No fix listed CWE-125
TI-2017-05737 CVE-2017-8162 · GHSA-rjx7-w47v-q3x6

Memory corruption in Huawei…

Priority LOW 30

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10,…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00734 Published 2017-11-22 No fix listed CWE-119