Vulnerabilidades em Huawei

1.420 resultados
Análise Vexday

Com 1.362 CVEs catalogadas, o portfólio de vulnerabilidades da Huawei apresenta volume expressivo, embora a taxa de exploração ativa esteja abaixo da média geral do catálogo, com nenhuma entrada confirmada no CISA KEV. O tipo de falha mais frequente é CWE-125 (leitura fora dos limites de buffer), padrão que tende a viabilizar vazamento de informações ou condições de instabilidade em equipamentos de rede e sistemas embarcados. A CVE de maior pontuação EPSS no momento é CVE-2019-5285, com índice de 0,0166 — valor baixo em termos absolutos, mas que ainda merece atenção em ambientes onde o ativo afetado esteja exposto. A ausência de PoCs públicas conhecidas reduz a superfície de exploração imediata, mas os 57 registros de severidade crítica e as 47 CVEs surgidas nos últimos 90 dias indicam que a gestão contínua de patches permanece necessária.

CVE-2021-22438—There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may causeEPSS 0.8%CVE-2021-36986—There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisEPSS 0.8%CVE-2021-37062—There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to mEPSS 0.8%CVE-2021-37059—There is a Weaknesses Introduced During DesignEPSS 0.8%CVE-2021-37084—There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious EPSS 0.8%CVE-2021-22474—There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.EPSS 0.8%CVE-2021-37065—There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to ConfiEPSS 0.8%CVE-2021-37042—There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds rEPSS 0.8%CVE-2021-37002—There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious EPSS 0.8%CVE-2021-37116—PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tEPSS 0.8%CVE-2021-22390—There is a Memory Buffer Improper Operation Limit Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may causeEPSS 0.8%CVE-2020-1856—Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 hEPSS 0.8%CVE-2019-5265—Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controEPSS 0.8%CVE-2021-22431—There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-oEPSS 0.8%CVE-2021-46786—The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabiliEPSS 0.8%CVE-2022-29794—The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integritEPSS 0.8%CVE-2021-46740—The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulneraEPSS 0.8%CVE-2021-46787—The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applicaEPSS 0.8%CVE-2020-9257—HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versEPSS 0.8%CVE-2021-40051—There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentialitEPSS 0.8%