Huawei: Security Vulnerabilities
A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211.
CVSS Score
9.8
EPSS Score
0.011
Published
2023-06-16
There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-06-16
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources.
CVSS Score
8.2
EPSS Score
0.003
Published
2023-06-16
Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app.
CVSS Score
10.0
EPSS Score
0.004
Published
2023-06-16
Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions.
CVSS Score
5.3
EPSS Score
0.003
Published
2023-06-16
The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-05-26
The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.
CVSS Score
3.3
EPSS Score
0.001
Published
2023-05-26
The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-05-26
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
CVSS Score
7.5
EPSS Score
0.004
Published
2023-05-26
Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read.
CVSS Score
9.8
EPSS Score
0.005
Published
2023-05-26