Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9066 State: PUBLISHED Published: 2020-03-26T14:25:10 Last Updated: 2024-08-04T10:19:19.787Z Vendors: n/a Products: OxfordP-AN10B Problem Types: Improper Authentication Description: Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - https://ww
tication to perform unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-phone
CVE ID: CVE-2020-9067 State: PUBLISHED Published: 2020-04-02T20:31:37 Last Updated: 2024-08-04T10:19:19.699Z Vendors: n/a Products: SmartAX MA5600T, SmartAX MA5800, SmartAX EA5800 Problem Types: Buffer Overflow Description: There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R
V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en
CVE ID: CVE-2020-9068 State: PUBLISHED Published: 2020-04-27T15:26:16 Last Updated: 2024-08-04T10:19:19.706Z Vendors: Huawei Products: AR3200 Problem Types: Improper Authentication Description: Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-authentication-en
CVE ID: CVE-2020-9069 State: PUBLISHED Published: 2020-05-21T14:19:31 Last Updated: 2024-08-04T10:19:19.496Z Vendors: HUAWEI Products: Anne-AL00, Berkeley-L09, CD16-10, CD17-10, CD17-16, CD18-10, CD18-16, Columbia-TL00B, E6878-370, HUAWEI P30 lite, HUAWEI nova 4e, Honor 10 Lite, LelandP-L22A, Marie-AL00AX, Marie-AL00AY, Marie-AL00BX, Marie-L03BX, Marie-L21BX, Marie-L22BX, Marie-L23BX, TC5200-16, WS5200-11, WS5200-12, WS5200-16, WS5200-17, WS5800-10, WS6500-10, WS6500-16 Problem Types: Information Leakage Description: There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploit
wei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier
ions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R
.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8 Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en
CVE ID: CVE-2020-9070 State: PUBLISHED Published: 2020-04-20T19:33:22 Last Updated: 2024-08-04T10:19:19.707Z Vendors: Huawei Products: Taurus-AL00B Problem Types: n/a Description: Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415
lyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-en - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-smartphone-en
CVE ID: CVE-2020-9071 State: PUBLISHED Published: 2020-06-01T14:02:46 Last Updated: 2024-08-04T10:19:19.924Z Vendors: n/a Products: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;AR510;NetEngine16EX;SRG1300;SRG2300;SRG3300 Problem Types: Out of Bounds Read Description: There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions
. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00 Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-01-oob-en
CVE ID: CVE-2020-9072 State: PUBLISHED Published: 2020-04-27T14:34:47 Last Updated: 2024-08-04T10:19:19.873Z Vendors: Huawei Products: OSD Problem Types: Local Privilege Escalation Description: Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-osd-en
CVE ID: CVE-2020-9073 State: PUBLISHED Published: 2020-05-15T13:58:11 Last Updated: 2024-08-04T10:19:19.804Z Vendors: n/a Products: P20 Problem Types: Improper Authentication Description: Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.
the limit of student mode function. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-01-smartphone-en
CVE ID: CVE-2020-9074 State: PUBLISHED Published: 2020-06-05T14:16:21 Last Updated: 2024-08-04T10:19:19.751Z Vendors: n/a Products: HONOR 20 PRO, Honor View 20, HONOR 20 Problem Types: Improper Handling of Exceptional Condition Description: Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-smartphone-en
CVE ID: CVE-2020-9075 State: PUBLISHED Published: 2020-06-15T14:56:27 Last Updated: 2024-08-04T10:19:19.686Z Vendors: n/a Products: Secospace USG6300;USG6300E Problem Types: Insufficient Input Description: Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories
ge. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-validation-en
CVE ID: CVE-2020-9076 State: PUBLISHED Published: 2020-06-15T15:07:13 Last Updated: 2024-08-04T10:19:19.771Z Vendors: n/a Products: HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B Problem Types: Improper Authentication Description: HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL. Additional Analyst Notes: - CVE Program Container: References:
he-middle attack to induce user to access malicious URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-02-phone-en
CVE ID: CVE-2020-9077 State: PUBLISHED Published: 2020-07-27T12:07:33 Last Updated: 2024-08-04T10:19:19.882Z Vendors: n/a Products: HUAWEI P30 Problem Types: Information Exposure Description: HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the device. Successful exploit may cause information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security
on disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200722-03-smartphone-en
CVE ID: CVE-2020-9078 State: PUBLISHED Published: 2020-08-10T19:14:49 Last Updated: 2024-08-04T10:19:19.702Z Vendors: n/a Products: FusionCompute Problem Types: Local Privilege Escalation Description: FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fusioncompute-en
CVE ID: CVE-2020-9079 State: PUBLISHED Published: 2020-08-11T01:38:19 Last Updated: 2024-08-04T10:19:20.002Z Vendors: n/a Products: FusionSphere OpenStack Problem Types: Protection Mechanism Failure Description: FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a way to exploit the vulnerability to conduct directed attacks against the affected product. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-failure-en
CVE ID: CVE-2020-9080 State: PUBLISHED Published: 2024-12-27T09:23:50.276Z Last Updated: 2024-12-27T16:08:48.159Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HUAWEI Mate 20 Pro, HUAWEI Mate 20 Pro (UD), HUAWEI nova 5i Problem Types: CWE-269 Description: There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080. Additional
0-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en
CVE ID: CVE-2020-9081 State: PUBLISHED Published: 2024-12-27T09:34:40.332Z Last Updated: 2024-12-27T16:08:00.642Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Huawei Products: HUAWEI Mate 20, HUAWEI P30, HUAWEI P30 Pro, Princeton-AL10D, Yale-AL00A, Yale-AL50A, YaleP-AL10B Problem Types: CWE-285 Description: There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE)
(Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2020/huawei-sa-20200826-15-smartphone-en
CVE ID: CVE-2020-9082 State: PUBLISHED Published: 2024-12-27T09:36:11.849Z Last Updated: 2024-12-27T16:06:48.799Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Huawei Products: HUAWEI Mate 20 Problem Types: CWE-200 Description: There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to gain certain information from certain apps locked by Applock. (Vulnerability ID: HWPSIRT-2019-07112) This vulnerability has been assigned a Co
on from certain apps locked by Applock. (Vulnerability ID: HWPSIRT-2019-07112) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9082. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-16-smartphone-en
CVE ID: CVE-2020-9083 State: PUBLISHED Published: 2020-09-03T18:07:15 Last Updated: 2024-08-04T10:19:19.799Z Vendors: n/a Products: HUAWEI Mate 20 Problem Types: DoS Description: HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-03-smartphone-en
CVE ID: CVE-2020-9084 State: PUBLISHED Published: 2020-09-18T18:06:19 Last Updated: 2024-08-04T10:19:19.783Z Vendors: n/a Products: Taurus-AN00B Problem Types: Use-after-free Description: Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en
CVE ID: CVE-2020-9085 State: PUBLISHED Published: 2024-12-27T09:37:46.838Z Last Updated: 2024-12-27T16:06:19.998Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HUAWEI 4G Router B612 Problem Types: CWE-476 Description: There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085. Additional Analyst
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-pointer_en
CVE ID: CVE-2020-9086 State: PUBLISHED Published: 2024-12-27T09:40:03.261Z Last Updated: 2024-12-27T15:06:52.987Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HUAWEI 4G Router B612 Problem Types: CWE-124 Description: There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086. Additional Analyst Notes: - CISA ADP Vu
as been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-01-buffer_en
CVE ID: CVE-2020-9087 State: PUBLISHED Published: 2020-10-12T13:31:12 Last Updated: 2024-08-04T10:19:19.855Z Vendors: n/a Products: Taurus-AL00A Problem Types: 10.0.0.1(C00E1R1P1) Description: Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-smartphone-en
CVE ID: CVE-2020-9089 State: PUBLISHED Published: 2024-12-27T09:44:20.785Z Last Updated: 2024-12-27T15:06:33.561Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Huawei Products: HUAWEI P30 Pro Problem Types: CWE-200 Description: There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089. Additional Analyst Notes: - CISA ADP Vuln
been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200826-09-smartphone-en
CVE ID: CVE-2020-9090 State: PUBLISHED Published: 2020-10-12T13:29:05 Last Updated: 2024-08-04T10:19:19.889Z Vendors: n/a Products: FusionAccess Problem Types: Improper Authorization Description: FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-fa-en
CVE ID: CVE-2020-9091 State: PUBLISHED Published: 2020-10-12T13:59:17 Last Updated: 2024-08-04T10:19:19.598Z Vendors: n/a Products: Taurus-AN00B Problem Types: Out-of-Bounds Read and Write Description: Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-03-smartphone-en
CVE ID: CVE-2020-9092 State: PUBLISHED Published: 2020-10-19T19:35:02 Last Updated: 2024-08-04T10:19:20.112Z Vendors: n/a Products: HUAWEI Mate 20 Problem Types: JavaScript Injection Description: HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-01-smartphone-en
CVE ID: CVE-2020-9093 State: PUBLISHED Published: 2020-12-29T17:24:42 Last Updated: 2024-08-04T10:19:19.880Z Vendors: Huawei Products: Taurus-AL00A Problem Types: Use after Free Description: There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would compromise normal service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-smartphone-en
CVE ID: CVE-2020-9094 State: PUBLISHED Published: 2020-12-29T17:28:53 Last Updated: 2024-08-04T10:19:19.790Z Vendors: Huawei Products: CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 Problem Types: Out of Bound Read Description: There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers can exploit this vulnerability by sending malicious packet. This can lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-obr-en