Huawei Technologies Co. vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2018-7977 There is an information leakage vulnerability on several Huawei products.High 7.5 · Nov 27, 2018
• CVE-2018-7960 There is a SRTP icon display vulnerability in Huawei eSpace product.High 7.4 · Nov 27, 2018
• CVE-2018-7958 There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product.High 7.4 · Nov 27, 2018
• CVE-2018-7923 Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter checHigh 7.8 · Sep 12, 2018
• CVE-2018-7922 Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter checHigh 7.8 · Sep 12, 2018
• CVE-2018-7937 In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due toHigh 7.8 · Sep 4, 2018
• CVE-2017-17312 Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in tHigh 7.5 · Aug 21, 2018
• CVE-2017-17311 Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in tHigh 7.5 · Aug 21, 2018
• CVE-2018-7994 Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6High 7.5 · Jul 31, 2018
• CVE-2018-7993 HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component.High 7.8 · Jul 31, 2018
• CVE-2017-17309 Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may accHigh 7.5 · Jun 14, 2018
• CVE-2017-17173 Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memoHigh 7.8 · Jun 14, 2018
• CVE-2017-17172 Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability.High 7.3 · Jun 14, 2018
• CVE-2018-7943 There is an authentication bypass vulnerability in some Huawei servers.High 8.8 · Jun 5, 2018
• CVE-2018-7951 The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation.High 8.8 · Jun 1, 2018
• CVE-2018-7950 The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation.High 8.8 · Jun 1, 2018
• CVE-2018-7949 The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a privilege escalation vulnerability.High 8.8 · Jun 1, 2018
• CVE-2018-7942 The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability.High 7.5 · May 24, 2018
• CVE-2018-7904 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.High 8.8 · May 24, 2018
• CVE-2018-7903 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.High 8.8 · May 24, 2018
• CVE-2018-7902 Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability.High 8.8 · May 24, 2018
• CVE-2018-7941 Huawei iBMC V200R002C60 have an authentication bypass vulnerability.High 8.8 · May 10, 2018
• CVE-2018-7933 Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traverHigh 7.8 · May 10, 2018
• CVE-2017-17258 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008High 7.5 · Apr 24, 2018
• CVE-2017-17257 Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008High 7.5 · Apr 24, 2018