rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9061 
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung STH-ETH-200 version 6.04, are susceptible to denial of service via malformed routing messages.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: ZooZ
product: ZST10
vendor: Silicon Labs
product: 500 series
vendor: Silicon Labs
product: 700 series
vendor: Silicon Labs
product: UZB-7
vendor: Samsung
product: STH-ETH-200
vendor: Aeon Labs
product: ZW090-A
Credits: lang: en
value: Carlos Nkuba Kayembe, Kim Seulbae, Sven Dietrich, and Heejo Lee
Published: 2022-01-07T04:30:29.498Z
CVE-2020-9062 
Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.
Problem types: cwe_id: CWE-353
description: CWE-353 Missing Support for Integrity Check
cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
cwe_id: CWE-311
description: CWE-311 Missing Encryption of Sensitive Data
Affected products: vendor: Diebold Nixdorf
product: ProCash 2100xe USB ATM
Published: 2020-08-21T20:30:41.251Z
CVE-2020-9063 
NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and execute arbitrary code with SYSTEM privileges on the host computer by causing a buffer overflow on the host.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: NCR
product: SelfServ ATM
Published: 2020-08-21T20:30:41.703Z
CVE-2020-9064 
Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
Problem types: description: Improper Authentication
Affected products: vendor: Huawei
product: Honor V30
Published: 2020-03-12T21:54:38.000Z
CVE-2020-9065 
Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.
Problem types: description: Use-after-free
Affected products: vendor: n/a
product: Taurus-AL00B
Published: 2020-03-26T14:30:08.000Z
CVE-2020-9066 
Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: OxfordP-AN10B
Published: 2020-03-26T14:25:10.000Z
CVE-2020-9067 
There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: SmartAX MA5600T
vendor: n/a
product: SmartAX MA5800
vendor: n/a
product: SmartAX EA5800
Published: 2020-04-02T20:31:37.000Z
CVE-2020-9068 
Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.
Problem types: description: Improper Authentication
Affected products: vendor: Huawei
product: AR3200
Published: 2020-04-27T15:26:16.000Z
CVE-2020-9069 
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8
Problem types: description: Information Leakage
Affected products: vendor: HUAWEI
product: Anne-AL00
vendor: HUAWEI
product: Berkeley-L09
vendor: HUAWEI
product: CD16-10
vendor: HUAWEI
product: CD17-10
vendor: HUAWEI
product: CD17-16
vendor: HUAWEI
product: CD18-10
vendor: HUAWEI
product: CD18-16
vendor: HUAWEI
product: Columbia-TL00B
vendor: HUAWEI
product: E6878-370
vendor: HUAWEI
product: HUAWEI P30 lite
vendor: HUAWEI
product: HUAWEI nova 4e
vendor: HUAWEI
product: Honor 10 Lite
vendor: HUAWEI
product: LelandP-L22A
vendor: HUAWEI
product: Marie-AL00AX
vendor: HUAWEI
product: Marie-AL00AY
vendor: HUAWEI
product: Marie-AL00BX
vendor: HUAWEI
product: Marie-L03BX
vendor: HUAWEI
product: Marie-L21BX
vendor: HUAWEI
product: Marie-L22BX
vendor: HUAWEI
product: Marie-L23BX
vendor: HUAWEI
product: TC5200-16
vendor: HUAWEI
product: WS5200-11
vendor: HUAWEI
product: WS5200-12
vendor: HUAWEI
product: WS5200-16
vendor: HUAWEI
product: WS5200-17
vendor: HUAWEI
product: WS5800-10
vendor: HUAWEI
product: WS6500-10
vendor: HUAWEI
product: WS6500-16
Published: 2020-05-21T14:19:31.000Z
CVE-2020-9070 
Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to exploit this vulnerability. Successful exploit may cause some information disclosure.
Problem types: description: n/a
Affected products: vendor: Huawei
product: Taurus-AL00B
Published: 2020-04-20T19:33:22.000Z
CVE-2020-9071 
There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cause service abnormal in specific scenario.Affected product versions include:AR120-S versions V200R007C00SPC900,V200R007C00SPCa00
Problem types: description: Out of Bounds Read
Affected products: vendor: n/a
product: AR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600;AR510;NetEngine16EX;SRG1300;SRG2300;SRG3300
Published: 2020-06-01T14:02:46.000Z
CVE-2020-9072 
Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Problem types: description: Local Privilege Escalation
Affected products: vendor: Huawei
product: OSD
Published: 2020-04-27T14:34:47.000Z
CVE-2020-9073 
Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the smartphone to exploit this vulnerability. Successful exploit could allow the attacker to bypass the limit of student mode function.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: P20
Published: 2020-05-15T13:58:11.000Z
CVE-2020-9074 
Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.
Problem types: description: Improper Handling of Exceptional Condition
Affected products: vendor: n/a
product: HONOR 20 PRO
vendor: n/a
product: Honor View 20
vendor: n/a
product: HONOR 20
Published: 2020-06-05T14:16:21.000Z
CVE-2020-9075 
Huawei products Secospace USG6300;USG6300E with versions of V500R001C30,V500R001C50,V500R001C60,V500R001C80,V500R005C00,V500R005C10;V600R006C00 have a vulnerability of insufficient input verification. An attacker with limited privilege can exploit this vulnerability to access a specific directory. Successful exploitation of this vulnerability may lead to information leakage.
Problem types: description: Insufficient Input
Affected products: vendor: n/a
product: Secospace USG6300;USG6300E
Published: 2020-06-15T14:56:27.000Z
CVE-2020-9076 
HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper authentication vulnerability. Due to the identity of the message sender not being properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B
Published: 2020-06-15T15:07:13.000Z
CVE-2020-9077 
HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the device. Successful exploit may cause information disclosure.
Problem types: description: Information Exposure
Affected products: vendor: n/a
product: HUAWEI P30
Published: 2020-07-27T12:07:33.000Z
CVE-2020-9078 
FusionCompute 8.0.0 have local privilege escalation vulnerability. A local, authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: FusionCompute
Published: 2020-08-10T19:14:49.000Z
CVE-2020-9079 
FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protection mechanism. An attacker has to find a way to exploit the vulnerability to conduct directed attacks against the affected product.
Problem types: description: Protection Mechanism Failure
Affected products: vendor: n/a
product: FusionSphere OpenStack
Published: 2020-08-11T01:38:19.000Z
CVE-2020-9080 
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
Problem types: cwe_id: CWE-269
description: CWE-269 Improper Privilege Management
Affected products: vendor: Huawei
product: HUAWEI Mate 20 Pro
default_status: unaffected
vendor: Huawei
product: HUAWEI Mate 20 Pro (UD)
default_status: unaffected
vendor: Huawei
product: HUAWEI nova 5i
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-12-27T09:23:50.276Z
CVE-2020-9081 
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)



This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Huawei
product: HUAWEI Mate 20
default_status: unaffected
vendor: Huawei
product: HUAWEI P30
default_status: unaffected
vendor: Huawei
product: HUAWEI P30 Pro
default_status: unaffected
vendor: Huawei
product: Princeton-AL10D
default_status: unaffected
vendor: Huawei
product: Yale-AL00A
default_status: unaffected
vendor: Huawei
product: Yale-AL50A
default_status: unaffected
vendor: Huawei
product: YaleP-AL10B
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2024-12-27T09:34:40.332Z
CVE-2020-9082 
There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to gain certain information from certain apps locked by Applock. (Vulnerability ID: HWPSIRT-2019-07112)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9082.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HUAWEI Mate 20
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2024-12-27T09:36:11.849Z
CVE-2020-9083 
HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service.
Problem types: description: DoS
Affected products: vendor: n/a
product: HUAWEI Mate 20
Published: 2020-09-03T18:07:15.000Z
CVE-2020-9084 
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.
Problem types: description: Use-after-free
Affected products: vendor: n/a
product: Taurus-AN00B
Published: 2020-09-18T18:06:19.000Z
CVE-2020-9085 
There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. (Vulnerability ID: HWPSIRT-2017-10105)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9085.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: Huawei
product: HUAWEI 4G Router B612
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-27T09:37:46.838Z
CVE-2020-9086 
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. (Vulnerability ID: HWPSIRT-2017-08234)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9086.
Problem types: cwe_id: CWE-124
description: CWE-124 Buffer Underwrite ('Buffer Underflow')
Affected products: vendor: Huawei
product: HUAWEI 4G Router B612
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-12-27T09:40:03.261Z
CVE-2020-9087 
Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak.
Problem types: description: 10.0.0.1(C00E1R1P1)
Affected products: vendor: n/a
product: Taurus-AL00A
Published: 2020-10-12T13:31:12.000Z
CVE-2020-9089 
There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.
Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Huawei
product: HUAWEI P30 Pro
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-12-27T09:44:20.785Z
CVE-2020-9090 
FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product.
Problem types: description: Improper Authorization
Affected products: vendor: n/a
product: FusionAccess
Published: 2020-10-12T13:29:05.000Z
CVE-2020-9091 
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device.
Problem types: description: Out-of-Bounds Read and Write
Affected products: vendor: n/a
product: Taurus-AN00B
Published: 2020-10-12T13:59:17.000Z
CVE-2020-9092 
HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module.
Problem types: description: JavaScript Injection
Affected products: vendor: n/a
product: HUAWEI Mate 20
Published: 2020-10-19T19:35:02.000Z
CVE-2020-9093 
There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would compromise normal service.
Problem types: description: Use after Free
Affected products: vendor: Huawei
product: Taurus-AL00A
Published: 2020-12-29T17:24:42.000Z
CVE-2020-9094 
There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers can exploit this vulnerability by sending malicious packet. This can lead to denial of service.
Problem types: description: Out of Bound Read
Affected products: vendor: Huawei
product: CloudEngine 12800
vendor: Huawei
product: CloudEngine 5800
vendor: Huawei
product: CloudEngine 6800
vendor: Huawei
product: CloudEngine 7800
Published: 2020-12-29T17:28:53.000Z
CVE-2020-9095 
HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause integer overflow. This can compromise normal service.
Problem types: description: Integer Overflow
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-08-21T13:26:27.000Z
CVE-2020-9096 
HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause out-of-bound read. This can compromise normal service.
Problem types: description: Out Of Bound Read
Affected products: vendor: n/a
product: HUAWEI P30 Pro
Published: 2020-08-21T13:20:40.000Z
CVE-2020-9098 
Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.
Problem types: description: Invalid Pointer Access
Affected products: vendor: n/a
product: OceanStor 5310 V5
Published: 2020-04-30T21:25:23.000Z