
CVE-2017-17292
https://notcve.org/view.php?id=CVE-2017-17292
15 Feb 2018 — Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR160 V200R006C10, V200R006C12, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R006C10, V200R007C00, V200R007C01, ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-06-xml-en • CWE-20: Improper Input Validation •

CVE-2017-17302
https://notcve.org/view.php?id=CVE-2017-17302
15 Feb 2018 — Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. An authenticated, local attacker may craft and load some specific Certificate Revocation List(CRL) configuration files to the devices repeatedly. Due to not release allocated memory properly, successful exploit may result in memory leak and services abnormal. Huawei DP300 V500R002C00... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-memory-en • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-15336
https://notcve.org/view.php?id=CVE-2017-15336
15 Feb 2018 — The SIP backup feature in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R002C00, V500R002C10, NIP6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, NIP6800 V500R001C50, RP200 V500R002C00, V600R006C00, SVN5600 V200R003C00, V200R003C10, SVN5800 V200R003C00, V200R003C10, SVN5800-C V200... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-sip-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-15318
https://notcve.org/view.php?id=CVE-2017-15318
22 Dec 2017 — RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system. RP200 V500R002C00, ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en • CWE-125: Out-of-bounds Read •

CVE-2017-15320
https://notcve.org/view.php?id=CVE-2017-15320
22 Dec 2017 — RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system. RP200 V500R002C00, ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en • CWE-125: Out-of-bounds Read •

CVE-2017-15319
https://notcve.org/view.php?id=CVE-2017-15319
22 Dec 2017 — RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote attacker could exploit these vulnerabilities by sending specially crafted SS7 related packets to the target devices. Successful exploit will cause out-of-bounds read and possibly crash the system. RP200 V500R002C00, ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171101-01-sccpx-en • CWE-125: Out-of-bounds Read •

CVE-2015-8672
https://notcve.org/view.php?id=CVE-2015-8672
12 Jan 2016 — The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation. El mecanismo de gestión de permisos de transmisión de presentación en terminales de videoconferencia multimedia Huawei TE30, TE40, TE50 y TE60 con software en versiones anteriores a V100R001C10S... • http://www.huawei.com/en/psirt/security-advisories/hw-462952 • CWE-19: Data Processing Errors •

CVE-2015-8673
https://notcve.org/view.php?id=CVE-2015-8673
12 Jan 2016 — Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation. Terminales de video conferencia multimedia Huawei TE30, TE40, TE50 y TE60 con software en versiones anteriores a V100R001C10SPC100 no requieren introducir la contraseña antigua cuando se cambia la con... • http://www.huawei.com/en/psirt/security-advisories/hw-462952 • CWE-255: Credentials Management Errors •