İçeriğe atla
Noroxi

Huawei kayıtları

Huawei üreticisine ait 2.341 yayımlanmış kayıt. Bunların 4 tanesi sahada sömürüldü (CISA KEV listesinde), 5 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
4 · %0,2
Silahlaştırılmış
5 · %0,2
Pre-auth RCE
52
Düzeltme kaydı olan
%0,4
Yayından KEV’e ortanca
828 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

2.341 kayıt
  • CVE-2019-0708
    99Hemen

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · windows 716 May 2019

  • CVE-2016-3081
    91Hemen

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attacker

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %96

    apache · struts26 Nis 2016

  • CVE-2019-2215
    83Hemen

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %72

    google · android11 Eki 2019

  • CVE-2017-14491
    65Bu hafta

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    thekelleys · dnsmasq3 Eki 2017

  • CVE-2020-0069
    61Bu hafta

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    google · android10 Mar 2020

  • CVE-2017-17215
    58Planlayın

    Huawei HG532 with some customized versions has a remote code execution vulnerability.

    YüksekCVSS 8,8Kavram kanıtıEPSS %78

    huawei · hg532 firmware20 Mar 2018

  • CVE-2020-8840
    47Planlayın

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedi

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    fasterxml · jackson-databind10 Şub 2020

  • CVE-2016-8276
    41Planlayın

    Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified securit

    KritikCVSS 9,8İstismar yokEPSS %5

    huawei · usg21003 Eki 2016

  • CVE-2017-3216
    41Planlayın

    WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote

    KritikCVSS 9,8İstismar yokEPSS %5

    greenpacket · ox350 firmware19 Haz 2017

  • CVE-2014-9134
    41Planlayın

    Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute

    KritikCVSS 10,0İstismar yokEPSS %2

    huawei · honor cube wireless router ws860s firewall3 Ara 2014

  • CVE-2012-6570
    41Planlayın

    The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S30

    KritikCVSS 10,0İstismar yokEPSS %1

    huawei · ar 18-1x20 Haz 2013

  • CVE-2013-6031
    40Planlayın

    The Huawei E355 adapter with firmware 21.157.37.01.910 does not require authentication for API pages, which allows remote attackers to chang

    OrtaCVSS 4,3SilahlaştırılmışEPSS %6

    huawei · e355 firmware11 Mar 2014

  • CVE-2016-6206
    40Planlayın

    Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code v

    KritikCVSS 9,8İstismar yokEPSS %3

    huawei · ar3200 firmware24 Mar 2017

  • CVE-2016-7109
    40Planlayın

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special character

    KritikCVSS 9,8İstismar yokEPSS %3

    huawei · uma7 Eyl 2016

  • CVE-2016-6178
    40Planlayın

    Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devic

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · ne5000e firmware2 Ağu 2016

  • CVE-2013-2612
    40Planlayın

    Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · e587 firmware27 Oca 2020

  • CVE-2016-7110
    40Planlayın

    Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special character

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · uma7 Eyl 2016

  • CVE-2017-2738
    40Planlayın

    VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · vcm5010 firmware22 Kas 2017

  • CVE-2016-4576
    40Planlayın

    Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, S

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · nip630023 May 2016

  • CVE-2016-6825
    40Planlayın

    Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SP

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · rh1288 v3 server firmware7 Eyl 2016

  • CVE-2015-7841
    40Planlayın

    The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · fusionserver ch121 v32 Eki 2017

  • CVE-2016-5365
    40Planlayın

    Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %2

    huawei · honor ws85114 Haz 2016

  • CVE-2015-4629
    40Planlayın

    Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication,

    KritikCVSS 9,8İstismar yokEPSS %1

    huawei · e5756s firmware7 Eyl 2017

  • CVE-2009-2271
    40Planlayın

    The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a

    KritikCVSS 10,0İstismar yokEPSS %1

    huawei · d1001 Tem 2009

  • CVE-2026-34865
    40Planlayın

    Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confi

    KritikCVSS 10,0İstismar yokEPSS %0

    huawei · harmonyos13 Nis 2026