|
220091
|
7.8 |
HIGH
Local
|
huawei
|
cd10-10_firmware
cd16-10_firmware
cd17-10_firmware
cd18-10_firmware
hirouter-cd15-10_firmware
hirouter-cd20-10_firmware
hirouter-cd21-16_firmware
hirouter-cd30-10_firmware
hir…
|
Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious file…
|
NVD-CWE-noinfo
|
CVE-2019-5269
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220092
|
5.5 |
MEDIUM
Local
|
huawei
|
hwbackup
hisuite
|
HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have a brute forcing encrypted backup data vulnerability. Huawe…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2019-5263
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220093
|
7.5 |
HIGH
Network
|
huawei
|
vp9630_firmware
vp9650_firmware
vp9660_firmware
|
There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An unauthenticated, remote attacker can guess information by a large number of attempts. Successful exploita…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2019-5232
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220094
|
5.5 |
MEDIUM
Local
|
huawei
|
p30_firmware
p30_pro_firmware
mate_20_firmware
hisuite_firmware
|
P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R2P1), versions earlier than Hima-AL00B …
|
CWE-346
Origin Validation Error
|
CVE-2019-5227
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220095
|
5.5 |
MEDIUM
Local
|
huawei
|
p30_firmware
|
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an applica…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-5224
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220096
|
8.8 |
HIGH
Adjacent
|
huawei
|
band_2_firmware
band_3_firmware
|
There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful ex…
|
CWE-287
Improper Authentication
|
CVE-2019-5218
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220097
|
5.5 |
MEDIUM
Local
|
huawei
|
p20_firmware
|
There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-5212
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220098
|
7.8 |
HIGH
Local
|
huawei
|
p30_firmware
mate_20_firmware
p30_pro_firmware
|
P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-5225
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220099
|
5.7 |
MEDIUM
Adjacent
|
huawei
|
p20_firmware
|
The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on …
|
NVD-CWE-noinfo
|
CVE-2019-5211
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220100
|
7.8 |
HIGH
Local
|
huawei
|
nova_5i_pro_firmware
nova_5_firmware
|
Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have an improper validation of array index vulnerability. The syst…
|
CWE-129
Improper Validation of Array Index
|
CVE-2019-5210
|
2024-11-21 13:44 |
2019-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
