CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5273
https://notcve.org/view.php?id=CVE-2019-5273
26 Dec 2019 — USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a large heap buffer overrun error, an attacker may exploit the vulnerability by a malicious certificate, resulting a denial of service on the affected products. USG9500 con versiones desde V500R001C30;V500R001C60 presentan una vulnerabilidad de denegación de servicio. Debido a un fallo en la implementación de X.509 en los productos af... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5274
https://notcve.org/view.php?id=CVE-2019-5274
26 Dec 2019 — USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products. USG9500 con versiones desde V500R001C30;V500R001C60 presentan una vulnerabilidad de denegación de servicio. Debido a un fallo en la implementación de X.509 en los productos afectados l... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5275
https://notcve.org/view.php?id=CVE-2019-5275
26 Dec 2019 — USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial of service attack on the affected products. USG9500 con versiones desde V500R001C30;V500R001C60 presentan una vulnerabilidad de denegación de servicio. Debido a un fallo en la implementación de X... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en • CWE-787: Out-of-bounds Write •
CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5272
https://notcve.org/view.php?id=CVE-2019-5272
26 Dec 2019 — USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection. USG9500 con versiones desde V500R001C30;V500R001C60 presentan una vulnerabilidad de falta de comprobación de integridad. El software de los productos afectados no comprueba la integridad, lo que puede permitir a un atacante con privilegios altos ll... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en • CWE-354: Improper Validation of Integrity Check Value •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2018-7994
https://notcve.org/view.php?id=CVE-2018-7994
31 Jul 2018 — Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory. Algunos productos Huawei IPS Module V500R... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-firewall-en • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 5.3EPSS: 0%CPEs: 224EXPL: 0CVE-2017-17251
https://notcve.org/view.php?id=CVE-2017-17251
24 Apr 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en • CWE-476: NULL Pointer Dereference •
CVSS: 5.3EPSS: 0%CPEs: 224EXPL: 0CVE-2017-17252
https://notcve.org/view.php?id=CVE-2017-17252
24 Apr 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 224EXPL: 0CVE-2017-17253
https://notcve.org/view.php?id=CVE-2017-17253
24 Apr 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 224EXPL: 0CVE-2017-17254
https://notcve.org/view.php?id=CVE-2017-17254
24 Apr 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 224EXPL: 0CVE-2017-17255
https://notcve.org/view.php?id=CVE-2017-17255
24 Apr 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10SPC300, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171227-01-h323-en • CWE-476: NULL Pointer Dereference •