Known vulnerabilities in Huawei P30
Vendor:
Huawei
Software:
Huawei P30
Software CPE:
cpe:2.3:a:huawei:huawei_p30:*:*:*:*:*:*:*:*
Website:
https://www.huawei.com
Total vulnerabilities:
16
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
10.0.0.210(C635E3R2P4)
10.0.0.209(C636E6R3P4)
10.0.0.206(C605E19R1P3)
10.0.0.201(C185E4R7P1)
10.0.0.201(C10E7R5P1)
10.0.0.200(C461E6R3P1)
10.0.0.200(C00E85R2P11)
10.0.0.195(C432E22R2P5)
11.0.0.128(C00E128R2P5)
11.0.0.138(C636E4R3P3)
11.0.0.138(C605E4R1P3)
11.0.0.138(C461E4R3P3)
11.0.0.138(C432E8R2P3)
11.0.0.138(C185E4R7P3)
11.0.0.138(C10E4R5P3)
11.0.0.120(C00E120R2P5)
11.0.0.118(C635E2R1P3)
10.1.0.165(C01E165R2P11)
10.1.0.168(C00E168R2P11)
10.1.0.168(C01E168R2P11)
10.1.0.176(C635E4R2P4)
10.1.0.177(C636E8R3P4)
10.1.0.179(C10E8R5P1)
10.1.0.179(C185E7R7P1)
10.1.0.179(C605E23R1P3)
10.1.0.128
10.1.0.126
10.1.0.123
10.1.0.160
10.1.0.135
10.0.0.195
10.0.0.190
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU54593 - Improper input validation CVE-2021-22399 |
CWE-20 | Low | 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.128(C00E128R2P5), 11.0.0.138(C605E4R1P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C636E4R3P3), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3) | 07.07.2021 |
SB2021070716 |
||
| #VU51955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22331 |
CWE-79 | Low | 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C605E4R1P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C636E4R3P3), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3) | 07.04.2021 |
SB2021040706 |
||
| #VU49208 - Resource Management Errors CVE-2020-9203 |
CWE-399 | Low | 10.1.0.168(C00E168R2P11), 10.1.0.168(C01E168R2P11), 10.1.0.176(C635E4R2P4), 10.1.0.177(C636E8R3P4), 10.1.0.179(C605E23R1P3), 10.1.0.179(C10E8R5P1), 10.1.0.179(C185E7R7P1) | 30.12.2020 |
SB2020123005 |
||
| #VU46993 - Memory corruption CVE-2020-9247 |
CWE-119 | Low | 10.1.0.123, 10.1.0.126 | 23.09.2020 |
SB2020092328 |
||
| #VU45997 - Resource Management Errors CVE-2020-9104 |
CWE-399 | Low | 10.1.0.123, 10.1.0.126, 10.1.0.128, 10.1.0.160 | 25.08.2020 |
SB2020082507 |
||
| #VU34096 - Improper Authorization CVE-2020-9245 |
CWE-285 | Low | 10.1.0.160 | 06.08.2020 |
SB2020062903 |
||
| #VU32909 - Missing release of memory after effective lifetime CVE-2020-9249 |
CWE-401 | Low | 10.1.0.160 | 29.07.2020 |
SB2020062903 |
||
| #VU31759 - Exposure of sensitive information to an unauthorized actor CVE-2020-9077 |
CWE-200 | Low | 10.1.0.160 | 22.07.2020 |
SB2020062903 |
||
| #VU29612 - Exposure of sensitive information to an unauthorized actor CVE-2020-9258 |
CWE-200 | Low | 10.1.0.135 | 09.07.2020 |
SB2020052713 |
||
| #VU29611 - Exposure of sensitive information to an unauthorized actor CVE-2020-9260 |
CWE-200 | Low | 10.1.0.123 | 09.07.2020 |
SB2020070922 |
||
| #VU29428 - Improper Verification of Cryptographic Signature CVE-2020-9226 |
CWE-347 | Low | 10.1.0.135 | 01.07.2020 |
SB2020052713 |
||
| #VU29340 - Exposure of sensitive information to an unauthorized actor CVE-2020-1836 |
CWE-200 | Low | 10.1.0.160 | 29.06.2020 |
SB2020062903 |
||
| #VU29140 - Improper Validation of Integrity Check Value CVE-2020-1834 |
CWE-354 | Low | 10.1.0.135 | 18.06.2020 |
SB2020052713 |
||
| #VU28951 - Improper Authentication CVE-2020-9076 |
CWE-287 | Low | 10.1.0.135 | 10.06.2020 |
SB2020052713 |
||
| #VU28288 - Improper Authentication CVE-2020-1798 |
CWE-287 | Low | 10.1.0.135 | 27.05.2020 |
SB2020052713 |
||
| #VU25357 - Out-of-bounds write CVE-2020-0022 |
CWE-787 | High | 10.0.0.190, 10.0.0.195 | 14.02.2020 |
SB2020021415 SB2020051408 |