CVE Vulnerability Catalog

The driver of honor 5C and honor 6X Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 has a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges of the Android system, which can lead to system reboot or arbitrary code execution.

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has an integer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, allowing arbitrary code execution.

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution.

The Bastet Driver in Nova 2 Plus and Nova 2 Huawei smartphones with software versions earlier than BAC-AL00C00B173 and PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application, which may lead to arbitrary code execution.

FusionSphere V100R006C00SPC102 (NFV) has an SQL injection vulnerability. An authenticated, remote attacker could craft interface messages carrying malicious SQL statements and send them to a target device.

FusionSphere V100R006C00SPC102 (NFV) has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device, potentially allowing the execution of system commands.

FusionSphere OpenStack V100R006C00SPC102(NFV) has an authentication vulnerability that allows improper authentication. Due to this vulnerability, an authenticated remote attacker may exploit it to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has an improper authentication vulnerability. An authenticated remote attacker may exploit this vulnerability to perform additional operations by sending a crafted REST message.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to insufficient input validation on one port, an authenticated, local attacker may exploit the vulnerability to gain root privileges by sending messages with malicious commands.

FusionSphere OpenStack V100R006C00 has an authorization vulnerability that allows an attacker with low privileges to gain operational access to a specific directory, leading to privilege escalation.

FusionSphere OpenStack V100R006C00SPC102 (NFV) has a command injection vulnerability. Due to lack of validation, an attacker with high privilege may inject malicious code into some module of the affected products, causing code execution.

ME906s-158 versions earlier than ME906S_Installer_13.1805.10.3 have a privilege elevation vulnerability. An attacker could exploit this vulnerability to modify configuration information containing malicious files and trick users into executing the files, resulting in the execution of arbitrary code.

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has an arbitrary memory write vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

The camera driver on the MTK platform in Huawei smartphones with software versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability. Due to insufficient input verification, an attacker can trick a user into installing a malicious application, leading to privilege escalation.

Huawei USG6300 and USG6600 devices with specific software versions have a vulnerability related to a weak algorithm. Attackers may exploit this vulnerability to crack the cipher text, leading to leaks of confidential information during transmission.

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, potentially leading to smartphone restart or arbitrary code execution.

Huawei smartphones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privileges, which can lead to smartphone restart or arbitrary code execution.