CVSS: 4.5EPSS: 0%CPEs: 6EXPL: 0CVE-2020-9111
https://notcve.org/view.php?id=CVE-2020-9111
E6878-370 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP21C233) and E6878-870 versions 10.0.3.1(H557SP27C233),10.0.3.1(H563SP11C233) have a denial of service vulnerability. The system does not properly check some events, an attacker could launch the events continually, successful exploit could cause reboot of the process. E6878-370 versiones 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP21C233) y E6878-870 versiones 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP11C233), presentan una vulnerabilidad de denegación de servicio. El sistema no comprueba apropiadamente algunos eventos, un atacante podría iniciar los eventos continuamente, una explotación con éxito podría causar el reinicio del proceso • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201014-02-dos-en •
CVSS: 7.0EPSS: 0%CPEs: 3EXPL: 0CVE-2020-9241
https://notcve.org/view.php?id=CVE-2020-9241
Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H563SP1C00),10.0.3.1(H563SP21C233) have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device. Huawei 5G Mobile WiFi E6878-370 con versiones de 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP21C233), presentan una vulnerabilidad de autorización inapropiada. El dispositivo no restringe determinados datos recibidos de un puerto WAN. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-01-auth-en •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-1832
https://notcve.org/view.php?id=CVE-2020-1832
E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution. Los productos E6878-370 con versiones de 10.0.3.1(H557SP27C233) y 10.0.3.1(H563SP1C00), presentan una vulnerabilidad de desbordamiento de búfer de la pila. El programa copia un búfer de entrada hacia un búfer de salida sin verificación. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-stack-en • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 38EXPL: 0CVE-2020-9069
https://notcve.org/view.php?id=CVE-2020-9069
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD16-10 Versions earlier than 10.0.2.8; CD17-10 Versions earlier than 10.0.2.8; CD17-16 Versions earlier than 10.0.2.8; CD18-10 Versions earlier than 10.0.2.8; CD18-16 Versions earlier than 10.0.2.8; Columbia-TL00B Versions earlier than 9.0.0.187(C01E181R1P20T8); E6878-370 Versions earlier than 10.0.5.1(H610SP10C00); HUAWEI P30 lite Versions earlier than 10.0.0.185(C605E3R1P3), Versions earlier than 10.0.0.197(C432E8R2P7); HUAWEI nova 4e Versions earlier than 10.0.0.158(C00E64R1P9); Honor 10 Lite 9.0.1.113(C675E11R1P12); LelandP-L22A Versions earlier than 9.1.0.166(C675E5R1P4T8); Marie-AL00AX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00AY Versions earlier than 10.0.0.158(C00E64R1P9); Marie-AL00BX Versions earlier than 10.0.0.158(C00E64R1P9); Marie-L03BX Versions earlier than 10.0.0.188(C605E5R1P1); Marie-L21BX Versions earlier than 10.0.0.188(C432E4R4P1), Versions earlier than 10.0.0.188(C461E5R3P1); Marie-L22BX Versions earlier than 10.0.0.188(C636E3R3P1); Marie-L23BX Versions earlier than 10.0.0.188(C605E5R1P1); TC5200-16 Versions earlier than 10.0.2.8; WS5200-11 Versions earlier than 10.0.2.8; WS5200-12 Versions earlier than 10.0.2.23; WS5200-16 Versions earlier than 10.0.2.8; WS5200-17 Versions earlier than 10.0.2.23; WS5800-10 Versions earlier than 10.0.3.27; WS6500-10 Versions earlier than 10.0.2.8; WS6500-16 Versions earlier than 10.0.2.8 Hay una vulnerabilidad de filtrado de información en algunos productos Huawei. Un atacante adyacente no autenticado podría explotar esta vulnerabilidad para descifrar datos. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-leakage-en •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2020-1799
https://notcve.org/view.php?id=CVE-2020-1799
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution. E6878-370 con versiones 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233), tiene un uso de la memoria previamente liberada. El software hace referencia a la memoria después de haber sido liberada en determinado escenario, el atacante hace una serie de operaciones especialmente diseñadas mediante el portal web, una explotación con éxito podría causar una condición de uso de la memoria previamente liberada que puede conllevar a una ejecución de código malicioso. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en • CWE-416: Use After Free •