Vulnerabilidades em Huawei

1.399 resultados
Análise Vexday

Com 1.362 CVEs catalogadas, o portfólio de vulnerabilidades da Huawei apresenta volume expressivo, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, com nenhuma entrada confirmada no CISA KEV. O tipo de falha mais frequente é CWE-125 (leitura fora dos limites de buffer), padrão que tende a viabilizar vazamento de informações ou condições de instabilidade em equipamentos de rede e sistemas embarcados. A CVE de maior pontuação EPSS no momento é CVE-2019-5285, com índice de 0,0166 — valor baixo em termos absolutos, mas que ainda merece atenção em ambientes onde o ativo afetado esteja exposto. A ausência de PoCs públicas conhecidas reduz a superfície de exploração imediata, mas os 57 registros de severidade crítica e as 47 CVEs surgidas nos últimos 90 dias indicam que a gestão contínua de patches permanece necessária.

CVE-2019-5301—Huawei smart phones Honor V20 with the versions before 9.0.1.161(C00E161R2P2) have an information leak vulnerability. An attacker may trick EPSS 0.5%CVE-2022-37005HIGHThe Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentialEPSS 0.5%CVE-2021-40030HIGHThe My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2021-22475—There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serviEPSS 0.5%CVE-2021-40024—Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability mayEPSS 0.5%CVE-2024-45443MEDIUMDirectory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confEPSS 0.5%CVE-2021-46836—Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability mayEPSS 0.5%CVE-2023-26548—The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may affect availabilityEPSS 0.5%CVE-2022-39012HIGHHuawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application servEPSS 0.5%CVE-2022-39003—Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and inteEPSS 0.5%CVE-2023-46773—Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.EPSS 0.5%CVE-2022-38988—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38978—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38997—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38992—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38979—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38994—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-38991—The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.EPSS 0.5%CVE-2022-41589HIGHThe DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affectEPSS 0.5%CVE-2022-41582HIGHThe security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.EPSS 0.5%