Vulnerabilidades de Huawei
CVEs publicadas que afetam produtos de Huawei: 163 registro(s), com severidade, exploração e correções.
Harmonyos 155Emui 29Agile Controller-campus Firmware 2Oceanstor 18800f Firmware 2Oceanstor 9000 Firmware 2Berkeley-l09 Firmware 2Columbia-l29d Firmware 2Cornell-tl10b Firmware 2Dura-al00a Firmware 2Nova 3 Firmware 2Honor View 20 Firmware 2Jakarta-al00a Firmware 2Princeton-al10b Firmware 2Sydney-al00 Firmware 2Sydney-tl00 Firmware 2Sydneym-al00 Firmware 2Tony-al00b Firmware 2Tony-tl00b Firmware 2Yale-al00a Firmware 2Yale-l21a Firmware 2openBMC 2Anyoffice 1Logcenter 1Firehunter6000 Firmware 1Oceanstor 5300 V3 Firmware 1Oceanstor 5500 V3 Firmware 1Oceanstor 5600 V3 Firmware 1Oceanstor 5800 V3 Firmware 1Oceanstor 6800 V3 Firmware 1Oceanstor 18500 V3 Firmware 1Oceanstor 18500f Firmware 1Oceanstor 18800 V3 Firmware 1Oceanstor N8500 Firmware 1Oceanstor Onebox Firmware 1Alp-al00b Firmware 1Alp-tl00b Firmware 1Anne-al00 Firmware 1Ares-al00b Firmware 1Ares-al10d Firmware 1Ares-tl00chw Firmware 1
CVE-2026-65200
Baixa · 3.5
CWE-191 13/10/2026
Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses
The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An undersized response wraps the unsigned length difference to a very large value, and the parser then reads far past the response buffer. The affected code sits in the base (non-vendor) PLDM control class and the Huawei NCSI driver, so it is reachable for any PLDM endpoint or Huawei NIC on the internal management bus, unlike the vendor-specific wangxun parser tracked separately.
CVE-2026-65199
Média · 5.4
CWE-266 13/10/2026
Huawei openUBMC low-privilege SNMP to administrator privilege escalation
openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege set for a `special_users` group that includes the `SNMPv1_v2c` pseudo-user.
CVE-2026-65198
Alta · 8.6
CWE-321 13/10/2026
Huawei Default SNMPv3 USM key
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customization `manifest/build/customization/default_password.lua` sets `AuthenticationKey == EncryptionKey == 7df2f29369e3ac3245b2c9d46b67a0ecd055197e41808a34ef325db2f6422581` for the iBMC product build, and the community seed `account/manufacture/default_password.lua` sets both to `7a2f5b86f20233ec7b7bef49643fbf34d86d0cbf6f1f8f5c52d4f30d4536938b`. These are shipped constants, not per-unit values, and they are not rotated by the Administrator password reset, so they survive account provisioning. This is especially dangerous considering that SNMP access is mapped to full device administration privileges, including system reset and firmware upgrades.
CVE-2026-41986
Baixa · 2.4
CWE-606 09/06/2026
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this…
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41985
Média · 5.1
CWE-284 09/06/2026
Improper Access Control em Huawei Harmonyos
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-41984
Média · 5.2
CWE-284 09/06/2026
Improper Access Control em Huawei Harmonyos
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-41983
Média · 4.3
CWE-399 09/06/2026
Null pointer dereference vulnerability in the browser module. Impact: Successful…
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41982
Média · 6.4
CWE-416 09/06/2026
Use After Free em Huawei Harmonyos
Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41981
Média · 5.3
CWE-122 09/06/2026
Heap-based Buffer Overflow em Huawei Harmonyos
Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41977
Média · 5.0
CWE-190 09/06/2026
Integer Overflow or Wraparound em Huawei Harmonyos
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41976
Média · 6.6
CWE-275 09/06/2026
Permission control vulnerability in the audio framework. Impact: Successful exploitation…
Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41974
Baixa · 3.6
CWE-264 09/06/2026
Permissions, Privileges, and Access Controls em Huawei Harmonyos
Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41973
Média · 5.9
CWE-840 09/06/2026
Permission control vulnerability in calls. Impact: Successful exploitation of this…
Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41972
Média · 5.4
CWE-22 09/06/2026
Path Traversal em Huawei Harmonyos
Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41980
Média · 5.5
CWE-200 09/06/2026
Exposure of Sensitive Information em Huawei Harmonyos
Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41979
Média · 5.5
CWE-701 09/06/2026
Permission control vulnerability in the print module. Impact: Successful exploitation of…
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.
CVE-2026-41978
Média · 4.4
CWE-275 09/06/2026
Permission control vulnerability in the clone module. Impact: Successful exploitation of…
Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41975
Média · 6.3
CWE-701 09/06/2026
Permission management vulnerability in the network management module. Impact: Successful…
Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-41971
Média · 5.5
CWE-840 15/05/2026
Permission control vulnerability in the security control module. Impact: Successful…
Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41970
Média · 6.8
CWE-787 15/05/2026
Out-of-bounds Write em Huawei Harmonyos
Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41969
Média · 6.2
CWE-275 15/05/2026
Permission control vulnerability in the projection module. Impact: Successful…
Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41968
Média · 5.9
CWE-840 15/05/2026
Permission control vulnerability in the manufacturability design module. Impact…
Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41967
Média · 5.9
CWE-840 15/05/2026
Permission control vulnerability in the manufacturability design module. Impact…
Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-41966
Média · 5.6
CWE-840 15/05/2026
Permission control vulnerability in the smart sensing service. Impact: Successful…
Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-41965
Média · 5.6
CWE-840 15/05/2026
Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this…
Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability.