SecLens 情报中心

厂商发布

厂商对产品安全、配置或策略的更新说明。

Apache MINA Deserialization Vulnerability in Some Huawei Products

发布时间 2026-06-03 08:00 (UTC+08:00) 抓取时间 2026-06-03 21:40 (UTC+08:00)

The open-source software Apache MINA used by some Huawei products has a deserialization vulnerability. Successful exploitation could lead to remote code execution. (Vulnerability ID:HWPSIRT-2026-63024) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-41409
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-63024"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-AMDViSHP-41477998",
  "sasn_version": "1.0",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-41409",
      "hwPsirtId": "HWPSIRT-2026-63024"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
Linux Kernel Netfilter Subsystem Out-of-Bounds Read Vulnerability in Some Huawei Products

发布时间 2026-06-03 08:00 (UTC+08:00) 抓取时间 2026-06-03 21:40 (UTC+08:00)

The Linux kernel netfilter subsystem used by some Huawei products has an out-of-bounds read vulnerability. Successful exploitation could lead to denial of service or information disclosure. (Vulnerability ID:HWPSIRT-2026-43799) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-23455
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-43799"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKNSOoBRViSHP-13135043",
  "sasn_version": "1.0",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-23455",
      "hwPsirtId": "HWPSIRT-2026-43799"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
ANSI Escape Sequence Injection Vulnerabilitiy in Some Huawei Products

发布时间 2026-06-03 08:00 (UTC+08:00) 抓取时间 2026-06-03 21:40 (UTC+08:00)

Some Huawei products that use Apache Tomcat have an ANSI escape sequence injection vulnerability in the Windows console environment. Attackers can exploit this vulnerability to manipulate the console display and induce administrators to execute malicious commands. (Vulnerability ID:HWPSIRT-2025-45144) This vulnerability has been assigned a Common Vulnerabili…
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2025-45144"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-AESIViSHP-40005749",
  "sasn_version": "2.5",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2025-55754",
      "hwPsirtId": "HWPSIRT-2025-45144"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
OpenSSL Buffer Overflow Vulnerability in Some Huawei Products

发布时间 2026-06-03 08:00 (UTC+08:00) 抓取时间 2026-06-03 21:40 (UTC+08:00)

The open-source software OpenSSL used by some Huawei products is vulnerable to buffer overflow. Successful exploitation of this vulnerability may lead to sensitive information leakage or denial of service (DoS). (Vulnerability ID:HWPSIRT-2024-55293) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2024-5535
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2024-55293"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-OBOViSHP-98139787",
  "sasn_version": "6.7",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2024-5535",
      "hwPsirtId": "HWPSIRT-2024-55293"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
Linux Kernel Classic Buffer Overflow Vulnerability in Some Huawei Products

发布时间 2026-06-03 08:00 (UTC+08:00) 抓取时间 2026-06-03 21:40 (UTC+08:00)

Some Huawei products are affected by the classic buffer overflow vulnerability in open-source software Linux kernel. Successful exploitation of this vulnerability may cause buffer overflow. (Vulnerability ID:HWPSIRT-2024-90214) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2024-38541
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2024-90214"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKCBOViSHP-33376191",
  "sasn_version": "4.2",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2024-38541",
      "hwPsirtId": "HWPSIRT-2024-90214"
    }
  ]
}
```
华为安全公告 Critical cve official_bulletin
Linux Kernel ESP in Some Huawei Products Vulnerable to Local Privilege Escalation "Dirty Frag"

发布时间 2026-06-01 08:00 (UTC+08:00) 抓取时间 2026-06-01 21:41 (UTC+08:00)

The IPsec ESP in Linux kernel used by some Huawei products has a local privilege escalation vulnerability "Dirty Frag". Successful exploitation of this vulnerability may allow attackers to escalate privileges through page-cache corruption. (Vulnerability ID:HWPSIRT-2026-27380) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) …
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-27380"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKEiSHPVtLPEDF-60937345",
  "sasn_version": "1.9",
  "severity": "High",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-43284",
      "hwPsirtId": "HWPSIRT-2026-27380"
    }
  ]
}
```
华为安全公告 High cve official_bulletin
Linux Kernel Local Privilege Escalation Vulnerability "Copy Fail" in Some Huawei Products

发布时间 2026-05-30 08:00 (UTC+08:00) 抓取时间 2026-05-30 21:41 (UTC+08:00)

The Linux kernel used by some Huawei products has a local privilege escalation vulnerability. Successful exploitation of this vulnerability allows attackers to escalate the local privilege to root or perform container escape. (Vulnerability ID:HWPSIRT-2026-49540) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-31…
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-49540"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-LKLPEVCFiSHP-32146806",
  "sasn_version": "1.8",
  "severity": "High",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-31431",
      "hwPsirtId": "HWPSIRT-2026-49540"
    }
  ]
}
```
华为安全公告 High cve official_bulletin
DoS Vulnerability in Some Huawei Data Communication Products

发布时间 2026-05-28 08:00 (UTC+08:00) 抓取时间 2026-05-28 21:40 (UTC+08:00)

Some Huawei data communication products have a DoS vulnerability. Successful exploitation of this vulnerability may cause an exception when the device parses packets sent from the authenticated peer device, resulting in DoS. (Vulnerability ID:HWPSIRT-2026-29427)
扩展字段
```
{
  "hw_psirt_ids": [
    "HWPSIRT-2026-29427"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-DViSHDCP-42041136",
  "sasn_version": "1.3",
  "severity": "High",
  "vulnerabilities": [
    {
      "cveId": "",
      "hwPsirtId": "HWPSIRT-2026-29427"
    }
  ]
}
```
华为安全公告 High official_bulletin

全部来源 Cloudflare 博客腾讯云安全公告 Adobe 安全公告阿里云 AVD Ubuntu 安全通告启明星辰安全通告 Amazon Linux AL2 公告 Amazon Linux AL2023 公告 AWS 安全公告 MSRC 更新指南 Oracle 安全警报 Apple 安全更新 Chrome 稳定版更新 Red Hat 安全公告 Atlassian 安全公告 NVIDIA 安全公告华为安全公告联想安全公告阿里云 Linux 安全公告阿里云 Linux CVE 通知阿里云安全公告 Amazon Linux 1 (EOL)安全公告 Amazon Linux 安全公告长亭漏洞库 Seebug 漏洞库 CISA KEV Catalog 微步银狐情报微步银狐 IOC Ransomware.live 近期受害者工信部 CNVDB CNNVD 通报 CNNVD 漏洞库 CNVD 漏洞库 FreeBuf 社区 TC260 标准征求意见 Seebug 技术 Paper GitHub Advisory HackerOne 博客 Exploit-DB 安天每日安全简讯 LinuxSecurity Hybrid VulDB 地方采购（CCGP）中央采购（CCGP） The Hacker News 嘶吼安全资讯 Doonsec 微信聚合 arXiv cs.CR VIPRead 信息安全知识库 RSA Conference Podcast 会议与培训融资快讯并购整合情报快报事件通报工具更新产品发布

厂商发布

订阅来源 RSS