Huawei Pcmanager vulnerabilities

8 CVEs affecting Huawei Pcmanager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40046, published 2022-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5242, published 2019-06-06. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. There is a code execution vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this…
CVE-2019-5223, published 2019-08-13. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result…
CVE-2019-5241, published 2019-06-06. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this…
CVE-2021-40046, published 2022-02-25. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.
CVE-2021-37124, published 2021-10-27. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit…
CVE-2020-1817, published 2020-04-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can…
CVE-2020-1844, published 2020-02-28. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this…
CVE-2020-1845, published 2020-04-27. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this…