1030 matches found
Security Advisory - DOS Vulnerability in Video Driver of Huawei Smart Phone
There is a Denial of Service DoS vulnerability in the video driver of some Huawei products. An attacker may trick a user into installing a malicious application, and the application can send given parameter to video driver to reboot the system. Vulnerability ID: HWPSIRT-2016-08046 This...
Security Advisory - Two Vulnerabilities in Huawei WS331a
Huawei WS331a is a Mini Wireless route. There is a Cross-site request forgery CSRF vulnerability in the management interface of WS331a products, an unauthenticated attacker could exploit this vulnerability to perform a CSRF attack. Successful exploit could allow the attacker to submit special...
Security Advisory - IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability
There is a vulnerability in the IP Version 6 IPv6 Neighbor Discovery packet process of multiple products, successful exploit could allow an unauthenticated, remote attacker to cause an affected device to start dropping legitimate IPv6 neighbors as legitimate ND times out, leading to a denial of...
Security Advisory - Multiple Vulnerabilities in Huawei Smart Phones
Huawei smart phones have two authentication bypass vulnerabilities. An attacker may tricks users into installing a malicious app, and the app could exploit these vulnerabilities to bypass the permission checks, controlling partial module functions Vulnerability ID: HWPSIRT-2016-03013, and deletin...
Security Advisory - Integer Overflowing Vulnerability in Huawei Smart Phone
An integer overflowing vulnerability exists in a Huawei smart phone. The attacker tricks the user to install a malicious application to obtain system or camera privilege and exploit the vulnerability to obtain the root privilege. Vulnerability ID: HWPSIRT-2015-11025 This vulnerability has been...
Security Advisory - Plaintext User Password Vulnerability in VCN500 Logs
Huawei VCN500 Video Cloud Node logs user passwords in plaintext for specific operations on the certain interface, leading to user password leakage. Vulnerability ID：HWPSIRT-2015-09032 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2015-8335. Huawei has...
Security Advisory - Information Leak Vulnerability in FusionCompute Products
There is a vulnerability in FusionCompute that enables common users to query unauthorized information. An attacker can exploit this vulnerability to query other users' information, leading to information leaks. Vulnerability ID: HWPSIRT-2015-10048 This vulnerability has been assigned Common...
Security Advisory - DoS Vulnerability in Camera Driver of Huawei Products
Some Huawei products have a DoS vulnerability. An attacker who has the system or camera permission can input invalid parameters into the camera driver program to crash the system. Vulnerability ID: HWPSIRT-2015-09013 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID...
Security Advisory - DoS Vulnerability in Huawei MBB Product
Huawei MBB Mobile Broadband product E3272s has a Denial of Service DoS vulnerability. An attacker could send a malicious packet to the Common Gateway Interface CGI of target device and make it fail while setting port attribute, which cause a DoS attack. Vulnerability ID: HWPSIRT-2015-05103 This...
Security Advisory - IP Option Improper Handling Vulnerability in Multiple Huawei Products
Multiple Huawei Products have an improper IP option handling vulnerability. The IP stack implementation in multiple Huawei products mishandles IP options when a crafted ICMP request message is received, leading to the board reboot Vulnerability ID: HWPSIRT-2015-02003. This Vulnerability has been...
Security Advisory-Buffer Overflow on Stack in HTTP Module
Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Attackers can make stack overflow by sending messages with the URI whose...
Security Advisory-HTTP Session Management Vulnerability in HTTP Module
Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...
Security Advisory - Buffer Overflow Vulnerability in a Huawei Printer Product
A Huawei printer product has a buffer overflow vulnerability. Successful exploitation could lead to device service exceptions. Vulnerability ID:HWPSIRT-2022-17649 This vulnerability has been assigned a CVE ID: CVE-2022-48260...
Security Advisory - Pointer Double Free Vulnerability in Huawei Smartphone
There is a pointer double free vulnerability in Huawei smartphone. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising normal...
Security Advisory - Path Traversal Vulnerability on Huawei Share
There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Vulnerabili...
Security Advisory - Authorization Bypass Vulnerability on Some Huawei Smartphone
Some Huawei smart phones have an authorization bypass vulnerability. Due to improper authorization implementation logic, attackers can bypass certain authorization scopes of smart phones by performing specific operations. This vulnerability can be exploited to perform operations beyond the scope ...
Security Advisory - Double Free Vulnerability on Smartphones
There is a double free vulnerability on certain driver of smartphones. An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same resource at the same time. Successful exploit could cause a denial of service condition. Vulnerability ID:...
Security Advisory - Race Condition Vulnerability on Several Smartphones
There is a race condition vulnerability on certain driver of smartphone. An attacker tricks the user into installing a malicious application, which make multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code. Vulnerability ID:...
Security Advisory - Improper Authorization Vulnerability in Huawei Watches
There is an improper authorization vulnerability in some Huawei watches. Due to improper permission configuration for specific operations, an attacker who obtained the Huawei ID bound to the watch can bypass permission verification to perform specific operations and modify some data on the watch...
Security Advisory - DoS Vulnerability in Some Huawei Smart Phones
Some Huawei smart phones have a denial of service DoS vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow th...
Security Advisory - Privilege Escalation Vulnerability in Some Huawei Servers
The iBMC Intelligent Baseboard Management Controller of some Huawei servers have a privilege escalation vulnerability. A remote attacker may send some specially crafted login messages to the affected products. Due to improper authentication design, successful exploit enables low privileged users ...
Security Advisory - Out-of-bounds Read Vulnerability in Huawei Smartphone Products
There is an out-of-bounds read vulnerability in Huawei Smartphone products. Due to the lack string terminator of string, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds and possibly cause...
Security Advisory - Permission Control Vulnerability in Huawei Video Application
There is a permission control vulnerability in Huawei video applications. Due to improper verification of specific infterface, an attacker who is on the same network with the user can obtain some information through a man-in-the-middle attack. Vulnerability ID: HWPSIRT-2018-02026 This vulnerabili...
Security Advisory - Directory Traversal Vulnerability in Huawei eSpace Product
There is a directory traversal vulnerability in Huawei eSpace product. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash...
Security Advisory - Sensitive Information Leak Vulnerability in Some Huawei Smart Phones
There is a sensitive information leak vulnerability in the CMA implementation of some Huawei smart phones. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak. Vulnerability ID:...
Security Advisory - FRP Bypass Vulnerability in Huawei Honor 5S Smart Phones
Huawei Honor 5S smart phones have a Factory Reset Protection FRP bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit this vulnerability to restore the phone to factory...
Security Advisory - Lack of Signature Verification Vulnerability in Some Huawei APP
Some Huawei APP do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking. Vulnerability ID: HWPSIRT-2017-07089 This vulnerability has been assigned a Commo...
Security Advisory - Authentication Bypass Vulnerability in Huawei Honor 5S Smart Phones
Huawei Honor 5S smart phones have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without...
Security Advisory - Weak Encryption Algorithm Vulnerability in Huawei Servers
Some Huawei servers have a weak encryption algorithm vulnerability in the iBMC Intelligent Baseboard Management Controller. The software provide an option for users to select SSL encryption algorithms. If an insecure encryption algorithm is selected, an attacker may decrypt encrypted data, causin...
Security Advisory - Input Validation Vulnerability in Multiple Huawei Products
There is an input validation vulnerability in Multiple Huawei products, when the debug switch on the device is enabled, an attacker with network access may exploit this vulnerability by crafting malformed DNS packets and sending them to the target device. As for the lacking of input validation, a...
Security Advisory - Cross-Site Script Vulnerability in Policy Center
Huawei Policy Center dynamically allocates network resources in a unified manner, enabling the network to provide services with more agility. A cross-site scripting XSS vulnerability exists in Huawei Policy Center. The vulnerability is caused by incomplete input validation. An attacker with a...
Security Advisory - DoS Vulnerability in Graphics Driver of Huawei Smart Phones
There is a Denial of Service DoS vulnerability in Graphics driver of some Huawei smart phones. An attacker may trick a user into installing a malicious application and the application can make semaphore deadlock issue, which causes the system to crash. Vulnerability ID: HWPSIRT-2015-12015 This...
Security Advisory - Two DoS Vulnerabilities in the HIFI Driver of Huawei Smart Phone
Some Huawei smart phones have two DoS Denial of Service security vulnerabilities in the HIFI driver. An attacker may trick a user into installing a malicious application and use the application to input null pointer as parameter, which can reboot the system. Vulnerability ID: HWPSIRT-2015-10038 a...
Security Advisory - Buffer Overflow Vulnerability in the FusionAccess
FusionAccess is a kind of virtual desktop applications based on Huawei cloud platform. Through the deployment of Huawei desktop cloud software on the cloud platform, customers can access the cloud desktop by the thin client device or other devices. There is a buffer overflow vulnerability in the...
Security Advisory-Privilege Escalation Vulnerability in IPMICommand of the HMM Software in a Huawei Server Product
The Hyper Module Management HMM software of some Huawei server products has a security vulnerability. When the operator of the HMM software uses the IPMICommand to perform operations on the iMana software, the operator can modify the user configuration of iMana through privilege escalation...
Security Advisory-Screen Capture Vulnerability on Huawei Ascend P6 Mobile Phones
Apps on Huawei Ascend P6 mobile phones can capture screens without the root permission. As a result, user information can be leaked by malware on Ascend P6 mobile phones. Vulnerability ID： HWPSIRT-2014-0893. This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID:...
Security Advisory - Use After Free Vulnerability in Huawei Smartphone
There is a use after free vulnerability in smartphone. A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal servic...
Security Advisory - Buffer Overflow Vulnerability in Huawei Smartphone
There is a buffer overflow vulnerability in Huawei smartphone. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...
Security Advisory - Insufficient Integrity Check Vulnerability in Huawei Product
There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the vulnerability by physically install malware. This could compromise normal service of the affected device. Vulnerability ID:...
Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product
There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct malicious application files, causing system applications to run abnormally. Vulnerability ID: HWPSIRT-2020-06020 This vulnerability has been assigned a Common Vulnerabilities and Exposures...
Security Advisory - Missing Initialization of Resource Vulnerability in Some Huawei SmartPhones
Missing Initialization of Resource Vulnerability in Some Huawei Smart Phones. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this vulnerability may cause device exceptions. Vulnerability...
Security Advisory - Denial of Service Vulnerability in Huawei FusionAccess Product
There is a Denial of Service DoS vulnerability in Huawei FusionAccess Product. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through other device on the same network. Successful exploit could cau...
Security Advisory - Improper Authentication Vulnerability in Several Huawei Products
Some Huawei products have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device. Vulnerability ID: HWPSIRT-2020-03160 This vulnerability has been assigned a Common...
Security Advisory - Lock-screen Bypass Vulnerability in Huawei Mate RS Smartphones
There is a lock-screen bypass vulnerability in Huawei Mate RS smartphones. An attacker could unlock and use the phone through certain operations. Vulnerability ID: HWPSIRT-2018-06108 This vulnerability has been assigned a CVE ID: CVE-2018-7929. Huawei has released software updates to fix this...
Security Advisory - Use After Free Vulnerability on Smartphone
There is a use after free vulnerability on mediaserver component in smartphone. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code. Vulnerability ID:...
Security Advisory - Authentication Bypass Vulnerability in Some Smart Phones
There is an authentication bypass vulnerability in some Huawei smart phones. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations. Vulnerability ID: HWPSIRT-2018-03001 This vulnerability has been assigned a Common Vulnerabilities a...
Security Advisory - Path Traversal Vulnerability in Some Huawei Home Gateway Products
There is a path traversal vulnerability on some Huawei home gateway products. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into installing a malicious APK plugin, and plugin can overwrite arbitrary file of devices. Successful explo...
Security Advisory - Memory Double Free Vulnerability on Huawei Smartphones
There is a memory double free vulnerability on Huawei smartphones. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code...
Security Advisory - Buffer Overflow Vulnerability in Some Huawei Products
There is buffer overflow vulnerability in some Huawei products. An unauthenticated, remote attacker may send specially crafted certificates to the affected products. Due to insufficient validation of the certificates, successful exploit may cause buffer overflow and some service abnormal...
Security Advisory - Two Vulnerabilities of License Module in Some Huawei Products
There is a uncontrolled format string vulnerability when the license module of some Huawei products output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service. Vulnerability ID: HWPSIRT-2017-06138 This vulnerability has been assigned ...