Huawei Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/huawei/ Sun, 26 Feb 2023 06:51:15 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Huawei Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/huawei/ 32 32 CVE-2018-7987 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7987/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7987/ There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.

The post CVE-2018-7987 appeared first on CVE Vulnerability.

]]> There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.

The post CVE-2018-7987 appeared first on CVE Vulnerability.

]]> CVE-2018-7988 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7988/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7988/ There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

The post CVE-2018-7988 appeared first on CVE Vulnerability.

]]> There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.

The post CVE-2018-7988 appeared first on CVE Vulnerability.

]]> CVE-2018-7989 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7989/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7989/ Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful exploit could allow the attacker to use the application which is locked.

The post CVE-2018-7989 appeared first on CVE Vulnerability.

]]> Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful exploit could allow the attacker to use the application which is locked.

The post CVE-2018-7989 appeared first on CVE Vulnerability.

]]> CVE-2018-7990 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7990/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7990/ Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass “Find My Phone” protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP.

The post CVE-2018-7990 appeared first on CVE Vulnerability.

]]> Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass “Find My Phone” protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP.

The post CVE-2018-7990 appeared first on CVE Vulnerability.

]]> CVE-2018-7992 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7992/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7992/ Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could […]

The post CVE-2018-7992 appeared first on CVE Vulnerability.

]]> Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition.

The post CVE-2018-7992 appeared first on CVE Vulnerability.

]]> CVE-2018-7993 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7993/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7993/ HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

The post CVE-2018-7993 appeared first on CVE Vulnerability.

]]> HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

The post CVE-2018-7993 appeared first on CVE Vulnerability.

]]> CVE-2018-7994 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7994/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7994/ Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device […]

The post CVE-2018-7994 appeared first on CVE Vulnerability.

]]> Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

The post CVE-2018-7994 appeared first on CVE Vulnerability.

]]> CVE-2018-7936 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7936/ Sun, 26 Feb 2023 06:51:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7936/ Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. […]

The post CVE-2018-7936 appeared first on CVE Vulnerability.

]]> Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148(C432) have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can connect the phone with PC and send special instructions to install third party desktop and disable the boot wizard. As a result, the FRP function is bypassed.

The post CVE-2018-7936 appeared first on CVE Vulnerability.

]]> CVE-2018-7937 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7937/ Sun, 26 Feb 2023 06:51:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7937/ In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the […]

The post CVE-2018-7937 appeared first on CVE Vulnerability.

]]> In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into installing it. Successful exploit could allow the attacker to obtain the root permission of the device and take full control over the device.

The post CVE-2018-7937 appeared first on CVE Vulnerability.

]]> CVE-2018-7940 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7940/ Sun, 26 Feb 2023 06:51:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7940/ Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.

The post CVE-2018-7940 appeared first on CVE Vulnerability.

]]> Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations.

The post CVE-2018-7940 appeared first on CVE Vulnerability.

]]>