Browse CVEs

HIGH 7.4 CVE-2015-8331 The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an … Vcn500 Mitigation only Fix from $1,9502016-01-11 HIGH 7.5 CVE-2015-8231 Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of se… Espace 7950 Mitigation only Fix from $1,9502016-01-11 HIGH 7.5 CVE-2015-8230 Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consu… Espace 8950 Mitigation only Fix from $1,9502016-01-11 MEDIUM 5.5 CVE-2015-8226 The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 … Ale Firmware Mitigation only Fix from $1,6002016-01-08 MEDIUM 5.5 CVE-2015-8225 The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 … Ale Firmware Mitigation only Fix from $1,6002016-01-08 HIGH 7.1 CVE-2015-8084 Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and e… Unified Security Gateway Firmware Mitigation only Fix from $1,9502015-12-07 HIGH 8.5 CVE-2015-8227 The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensi… Vp 9660 Firmware Mitigation only Fix from $1,9502015-11-24 MEDIUM 5.0 CVE-2015-8087 Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC1… Ne Router Software Mitigation only Fix from $1,6002015-11-19 HIGH 7.8 CVE-2015-8083 An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 does not … Espace Firmware Mitigation only Fix from $1,9502015-11-19 MEDIUM 5.0 CVE-2015-7845 The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software befor… Espace Firmware Mitigation only Fix from $1,6002015-11-19 MEDIUM 5.0 CVE-2015-7254EPSS 28% Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. (dot dot) in … Hg532e No fix yet Fix from $1,6002015-11-07 MEDIUM 5.0 CVE-2015-3912 Huawei E355s Mobile WiFi with firmware before 22.158.45.02.625 and WEBUI before 13.100.04.01.625 allows remote attackers to obtain sensitive configur… Webui after 22.158.01.00.625 Fix from $1,6002015-05-21 HIGH 9.0 CVE-2015-3911 Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to bypass authentication, change configurations, send messages, … E587 Mobile Wifi Firmware after 11.100.00.00.00 Fix from $1,9502015-05-21 HIGH 7.5 CVE-2015-1460 Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet. Quidway Firmware Mitigation only Fix from $1,9502015-02-03 HIGH 7.2 CVE-2014-2273 The hx170dec device driver in Huawei P2-6011 before V100R001C00B043 allows local users to read and write to arbitrary memory locations via unspecifie… P2 6011 Firmware No fix yet Fix from $1,9502014-12-05 HIGH 10.0 CVE-2014-9134 Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrar… Honor Cube Wireless Router Ws860s Firewall Mitigation only Fix from $1,9502014-12-03 MEDIUM 6.8 CVE-2014-5395 Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R… E5180s 22 Firmware No fix yet Fix from $1,6002014-11-21 HIGH 7.2 CVE-2014-8359 Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct D… Mobile Partner Firmware No fix yet Fix from $1,9502014-11-13 MEDIUM 6.8 CVE-2014-8331 Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B1… E3236 Firmware Mitigation only Fix from $1,6002014-10-20 MEDIUM 6.8 CVE-2014-5328 Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a denial of… E5332 Firmware Mitigation only Fix from $1,6002014-10-12 MEDIUM 6.8 CVE-2014-5327 Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a denial of… E5332 Firmware after 21.344.19.00.1080 Fix from $1,6002014-10-12 HIGH 7.8 CVE-2014-4190 Multiple heap-based buffer overflows in Huawei Campus Series Switches S3700HI, S5700, S6700, S3300HI, S5300, S6300, S9300, S7700, and LSW S9700 with … Campus Series Switch Software Mitigation only Fix from $1,9502014-06-17 MEDIUM 6.8 CVE-2014-2946 Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems with software 22.157.18.00.8… Webui Mitigation only Fix from $1,6002014-06-02 HIGH 9.0 CVE-2013-4633 Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a … Seco Versatile Security Manager Mitigation only Fix from $1,9502013-06-20 HIGH 8.5 CVE-2013-4629 The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a l… Vp 9610 Mitigation only Fix from $1,9502013-06-20 HIGH 7.8 CVE-2013-4631 Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of service (device crash) via malf… Ar 1200 Mitigation only Fix from $1,9502013-06-20 HIGH 7.8 CVE-2013-4632 The Huawei Access Router (AR) before V200R002SPC003 allows remote attackers to cause a denial of service (device reset) via a crafted field in a DHCP… Access Router Mitigation only Fix from $1,9502013-06-20 HIGH 7.6 CVE-2013-4630 Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allows remote attackers to execute… Ar 1200 No fix yet Fix from $1,9502013-06-20 HIGH 10.0 CVE-2012-6570 The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500… Ar 18 1x Mitigation only Fix from $1,9502013-06-20 HIGH 9.3 CVE-2012-6569 Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR … Ar 18 1x Mitigation only Fix from $1,9502013-06-20