Page 3 of 87 results (0.006 seconds)

CVSS: 5.5EPSS: 0%CPEs: 33EXPL: 0

CVE-2017-15323

https://notcve.org/view.php?id=CVE-2017-15323

09 Mar 2018 — Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R001C01, V100R001C10, V100R003C00, V500R002C00, V600R006C00, TP3106 V100R001C06, V100R002C00, VP9660 V200R001C02, V200R001C30, V500R002C00, V500R002C10, ViewPoint 8660 V100R008C03, ViewPoint 9030 V100R011C02, V100R011C03, eCNS210_TD V100R004C10, eSpace U1981 V200R003C30 have a DoS vulnerability caused by memory exhaustion in some Huawei products. For lacking of adequate ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-pse-en • CWE-400: Uncontrolled Resource Consumption •

CVSS: 5.5EPSS: 0%CPEs: 32EXPL: 0

CVE-2017-15314

https://notcve.org/view.php?id=CVE-2017-15314

09 Mar 2018 — Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE50 V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPCb00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerabi... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-xml-en • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 3.1EPSS: 0%CPEs: 19EXPL: 0

CVE-2017-17282

https://notcve.org/view.php?id=CVE-2017-17282

09 Mar 2018 — SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal. El módulo SCCP (Signalling Connec... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180228-01-sccp-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-17304

https://notcve.org/view.php?id=CVE-2017-17304

09 Mar 2018 — The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 1%CPEs: 2EXPL: 0

CVE-2017-17146

https://notcve.org/view.php?id=CVE-2017-17146

09 Mar 2018 — Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks or remote code execution on the device. Huawei DP300 V500R002C00 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación. Un atacante local autenticado puede manipular archivos XML específicos en los productos afectados y analizar este archivo, lo que resu... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-xml-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 18EXPL: 0

CVE-2017-17169

https://notcve.org/view.php?id=CVE-2017-17169

09 Mar 2018 — The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker to tamper with business and make the system abnormal. Affected Huawei Products are: DP300 versions V500R002C00, V500R002C00B010, V500R002C00B011, V500R002C00B012, V500R002C00B013, V500R002C00B014, V500R002C00B... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-02-cidam-en • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 19EXPL: 0

CVE-2017-17150

https://notcve.org/view.php?id=CVE-2017-17150

09 Mar 2018 — Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the parameter. An authenticated local attacker may call a special API with special parameter, which cause an infinite loop. Successful exploit of this vulnerability can allow an attacker to launch DOS attack. El módulo Timergr... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171220-01-vpp-en • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 5.9EPSS: 0%CPEs: 7EXPL: 0

CVE-2017-17167

https://notcve.org/view.php?id=CVE-2017-17167

09 Mar 2018 — Huawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use of a broken or risky cryptographic algorithm vulnerability. The software uses risky cryptographic algorithm in SSL. This is dangerous because a remote unauthenticated attacker could use well-known techniques to break the algorithm. Successful exploit could result in the exposure of sensitive information. Huawei DP300 V500R002C00; TP3206 V100R002C00 y ViewPoint 9030 V100R011C02 y V100R011C03 tienen una vulnerabil... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171215-01-ssl-en • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 5.9EPSS: 0%CPEs: 19EXPL: 0

CVE-2017-17216

https://notcve.org/view.php?id=CVE-2017-17216

09 Mar 2018 — Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause process reboot. El protocolo... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en • CWE-125: Out-of-bounds Read •

CVSS: 5.3EPSS: 0%CPEs: 19EXPL: 0

CVE-2017-17220

https://notcve.org/view.php?id=CVE-2017-17220

09 Mar 2018 — SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service. El módulo SCCPX en Hu... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en • CWE-125: Out-of-bounds Read •