Vulnerabilidades em Huawei

1.399 resultados
Análise Vexday

Com 1.362 CVEs catalogadas, o portfólio de vulnerabilidades da Huawei apresenta volume expressivo, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, com nenhuma entrada confirmada no CISA KEV. O tipo de falha mais frequente é CWE-125 (leitura fora dos limites de buffer), padrão que tende a viabilizar vazamento de informações ou condições de instabilidade em equipamentos de rede e sistemas embarcados. A CVE de maior pontuação EPSS no momento é CVE-2019-5285, com índice de 0,0166 — valor baixo em termos absolutos, mas que ainda merece atenção em ambientes onde o ativo afetado esteja exposto. A ausência de PoCs públicas conhecidas reduz a superfície de exploração imediata, mas os 57 registros de severidade crítica e as 47 CVEs surgidas nos últimos 90 dias indicam que a gestão contínua de patches permanece necessária.

CVE-2021-37092—There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affeEPSS 0.7%CVE-2021-37027—There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.EPSS 0.7%CVE-2021-40005—The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect EPSS 0.7%CVE-2021-40025—The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerabilityEPSS 0.7%CVE-2021-40018—The eID module has a null pointer reference vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.7%CVE-2021-37125—Arbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability .Successful exploitation of this vulnerabilityEPSS 0.7%CVE-2021-37067—There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulEPSS 0.7%CVE-2021-37038—There is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confEPSS 0.7%CVE-2021-39972—MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability coEPSS 0.7%CVE-2021-39971—Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could cEPSS 0.7%CVE-2021-37096—There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privaEPSS 0.7%CVE-2021-40021—The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentialityEPSS 0.7%CVE-2021-37060—There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR HeapEPSS 0.7%CVE-2021-40020—There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerabilEPSS 0.7%CVE-2022-34739—The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in tEPSS 0.7%CVE-2021-37091—There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lEPSS 0.7%CVE-2022-29792—The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.7%CVE-2022-34743—The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system avEPSS 0.7%CVE-2021-37077—There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crasEPSS 0.7%CVE-2021-37089—There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart.EPSS 0.7%