CVE-2015-8085
https://notcve.org/view.php?id=CVE-2015-8085
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S5300 routers with software before V200R007C00; and S5700 routers with software before V200R007C00SPC500 make it easier for remote authenticated administrators to obtain and decrypt passwords by leveraging selection of a reversible encryption algorithm. Routers Huawei AR con software en versiones anteriores a V200R007C00SPC100; routers Quidway S9300 con software en versiones anteriores a V200R009C00; routers S12700 con software en versiones anteriores aV200R008C00SPC500; routers S9300, Quidway S5300 y S5300 con software en versiones anteriores aV200R007C00 y routers S5700 con software en versiones anteriores aV200R007C00SPC500 facilita a administradores remotos autenticados obtener y descifrar contraseñas aprovechando la selección de un algoritmos de cifrado reversible. • http://www.huawei.com/en/psirt/security-advisories/hw-455876 http://www.securityfocus.com/bid/76897 • CWE-326: Inadequate Encryption Strength •
CVE-2016-6518
https://notcve.org/view.php?id=CVE-2016-6518
Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of malformed packets. Fuga de memoria en dispositivos Huawei S9300, S5300, S5700, S6700, S7700, S9700 y S12700 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y reinicio) a través de un gran número de paquetes malformados. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160914-01-sep-en http://www.securityfocus.com/bid/92968 • CWE-399: Resource Management Errors •
CVE-2016-4087
https://notcve.org/view.php?id=CVE-2016-4087
Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets. Huawei S12700 switches con software en versiones anteriores a V200R008C00SPC500 y switches S5700 con software en versiones anteriores a V200R005SPH010, cuando el depurado del switch está activado, permite a atacantes remotos provocar una denegación de servicio o ejecutar código arbitrario a través de un paquete DNS manipulado. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160427-01-dns-en • CWE-20: Improper Input Validation •