Skip to content
Noroxi

Huawei records

2,341 published records for vendor huawei.

Researcher profile

Entered KEV
4 · 0.2%
Weaponized
5 · 0.2%
Pre-auth RCE
52
With a fix record
0.4%
Median publish → KEV
828 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

2,341 records
  • CVE-2019-0708
    99Now

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker

    CriticalCVSS 9.8KEVWeaponizedEPSS 100%

    microsoft · windows 7May 16, 2019

  • CVE-2016-3081
    91Now

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attacker

    HighCVSS 8.1KEVWeaponizedEPSS 96%

    apache · strutsApr 26, 2016

  • CVE-2019-2215
    83Now

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

    HighCVSS 7.8KEVWeaponizedEPSS 72%

    google · androidOct 11, 2019

  • CVE-2017-14491
    64This week

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    CriticalCVSS 9.8Proof of conceptEPSS 85%

    thekelleys · dnsmasqOct 3, 2017

  • CVE-2020-0069
    61This week

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization a

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    google · androidMar 10, 2020

  • CVE-2017-17215
    58Plan

    Huawei HG532 with some customized versions has a remote code execution vulnerability.

    HighCVSS 8.8Proof of conceptEPSS 78%

    huawei · hg532 firmwareMar 20, 2018

  • CVE-2020-8840
    47Plan

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedi

    CriticalCVSS 9.8Proof of conceptEPSS 27%

    fasterxml · jackson-databindFeb 10, 2020

  • CVE-2016-8276
    41Plan

    Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified securit

    CriticalCVSS 9.8No exploitEPSS 6%

    huawei · usg2100Oct 3, 2016

  • CVE-2017-3216
    41Plan

    WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote

    CriticalCVSS 9.8No exploitEPSS 5%

    greenpacket · ox350 firmwareJun 19, 2017

  • CVE-2014-9134
    41Plan

    Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute

    CriticalCVSS 10.0No exploitEPSS 2%

    huawei · honor cube wireless router ws860s firewallDec 3, 2014

  • CVE-2012-6570
    41Plan

    The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S30

    CriticalCVSS 10.0No exploitEPSS 2%

    huawei · ar 18-1xJun 20, 2013

  • CVE-2016-6206
    40Plan

    Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code v

    CriticalCVSS 9.8No exploitEPSS 4%

    huawei · ar3200 firmwareMar 24, 2017

  • CVE-2016-7109
    40Plan

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special character

    CriticalCVSS 9.8No exploitEPSS 4%

    huawei · umaSep 7, 2016

  • CVE-2016-6178
    40Plan

    Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devic

    CriticalCVSS 9.8No exploitEPSS 3%

    huawei · ne5000e firmwareAug 2, 2016

  • CVE-2013-2612
    40Plan

    Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with

    CriticalCVSS 9.8No exploitEPSS 3%

    huawei · e587 firmwareJan 27, 2020

  • CVE-2016-7110
    40Plan

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special character

    CriticalCVSS 9.8No exploitEPSS 3%

    huawei · umaSep 7, 2016

  • CVE-2017-2738
    40Plan

    VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability.

    CriticalCVSS 9.8No exploitEPSS 3%

    huawei · vcm5010 firmwareNov 22, 2017

  • CVE-2016-4576
    40Plan

    Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, S

    CriticalCVSS 9.8No exploitEPSS 2%

    huawei · nip6300May 23, 2016

  • CVE-2016-6825
    40Plan

    Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SP

    CriticalCVSS 9.8No exploitEPSS 2%

    huawei · rh1288 v3 server firmwareSep 7, 2016

  • CVE-2015-7841
    40Plan

    The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software

    CriticalCVSS 9.8No exploitEPSS 2%

    huawei · fusionserver ch121 v3Oct 2, 2017

  • CVE-2016-5365
    40Plan

    Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to execute arbitrary co

    CriticalCVSS 9.8No exploitEPSS 2%

    huawei · honor ws851Jun 14, 2016

  • CVE-2015-4629
    40Plan

    Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication,

    CriticalCVSS 9.8No exploitEPSS 2%

    huawei · e5756s firmwareSep 7, 2017

  • CVE-2009-2271
    40Plan

    The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a

    CriticalCVSS 10.0No exploitEPSS 1%

    huawei · d100Jul 1, 2009

  • CVE-2026-34865
    40Plan

    Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi

    CriticalCVSS 10.0No exploitEPSS 0%

    huawei · harmonyosApr 13, 2026

  • CVE-2019-19398
    39Monitor

    M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    huawei · m5 lite 10 firmwareDec 26, 2019