Huawei vulnerabilities3 known to be exploited.
Huawei has 2,170 published vulnerabilities across 1,970 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Harmonyos, with 888. If you run Huawei software, patch the exploited flaws first.
The most recent Huawei flaw added to the known-exploited list is CVE-2019-0708, on 3 November 2021. We keep watching the known-exploited list.
Which Huawei products have the most vulnerabilities?
Harmonyos leads with 888 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Huawei vulnerabilities are being exploited?
3 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially...
- 7.8Android Kernel Use-After-Free Vulnerability
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel.
- 7.8Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers.
Which Huawei flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted...
- 85%CVE-2017-14491Critical
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
- 78%CVE-2017-17215High
Huawei HG532 with some customized versions has a remote code execution vulnerability.
- 74%CVE-2015-2808Medium
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct...
- 72%
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.
- 27%CVE-2020-8840Critical
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
- 15%CVE-2020-12695High
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified...
- 13%CVE-2018-7921Medium
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability.
- 7.3%CVE-2017-17309High
Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received HTTP requests, a remote attacker may access the local files on the device without authentication.
All Huawei products we track.
565 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Harmonyosharmonyos888 vulnerabilities17 versions
- Emuiemui776 vulnerabilities14 versions
- Magic UImagic_ui276 vulnerabilities7 versions
- Secospace Usg6600secospace_usg660089 vulnerabilities1 version
- Secospace Usg6600 Firmwaresecospace_usg6600_firmware88 vulnerabilities68 versions
- Dp300 Firmwaredp300_firmware87 vulnerabilities18 versions
- Te60 Firmwarete60_firmware83 vulnerabilities50 versions
- Usg9500usg950083 vulnerabilities1 version
- Usg9500 Firmwareusg9500_firmware81 vulnerabilities38 versions
- Te30 Firmwarete30_firmware77 vulnerabilities22 versions
- Te50 Firmwarete50_firmware77 vulnerabilities7 versions
- Te40 Firmwarete40_firmware76 vulnerabilities8 versions
- Secospace Usg6300 Firmwaresecospace_usg6300_firmware67 vulnerabilities41 versions
- Secospace Usg6500 Firmwaresecospace_usg6500_firmware67 vulnerabilities41 versions
- Rp200 Firmwarerp200_firmware65 vulnerabilities6 versions
- Nip6600nip660063 vulnerabilities1 version
- Nip6300nip630061 vulnerabilities1 version
- Nip6600 Firmwarenip6600_firmware61 vulnerabilities32 versions
- Nip6800nip680060 vulnerabilities1 version
- Nip6300 Firmwarenip6300_firmware59 vulnerabilities33 versions
- Nip6800 Firmwarenip6800_firmware59 vulnerabilities16 versions
- Ngfw Modulengfw_module58 vulnerabilities2 versions
- Ngfw Module Firmwarengfw_module_firmware56 vulnerabilities32 versions
- IPS Moduleips_module54 vulnerabilities1 version
This directory lists the 565 Huawei products with at least one tracked version, of 1,970 in our catalogue.
Running Huawei? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
- Matched to
- Ar on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 2,170 published vulnerabilities across 1,970 products and 4,783 versions from Huawei. The most recent Huawei flaw added to the known-exploited list is CVE-2019-0708, on 3 November 2021.
3 Huawei vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2019-0708, CVE-2019-2215 and CVE-2020-0069. The full list is on this page.
Harmonyos, with 888 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Huawei products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.