41 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 48EXPL: 0

CVE-2021-37129

https://notcve.org/view.php?id=CVE-2021-37129

27 Oct 2021 — There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly verify input parameter. Successful exploit could cause out of bounds write leading to a denial of service condition.Affected product versions include:IPS Module V500R005C00,V500R005C20;NGFW Module V500R005C00;NIP6600 V500R005C00,V500R005C20;S12700 V200R010C00SPC600,V200R011C10SPC500,V200R011C10SPC600,V200R013C00SPC500,V200R019C00SPC200,V200R019C00SPC500,V200R019... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20211020-01-outofwrite-en • CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0

CVE-2021-22357

https://notcve.org/view.php?id=CVE-2021-22357

23 Aug 2021 — There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. Attackers can exploit this vulnerability by sending specific messages to affected module. This can cause denial of service. Affected product versions include: S12700 V200R013C00SPC500, V200R019C00SPC500; S5700 V200R013C00SPC500, V200R019C00SPC500; S6700 V200R013C00SPC500, V200R019C00SPC500; S7700 V200R013C00SPC500, V200R019C00SPC500. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210512-01-dos-en • CWE-20: Improper Input Validation •

CVSS: 4.9EPSS: 0%CPEs: 47EXPL: 0

CVE-2021-22329

https://notcve.org/view.php?id=CVE-2021-22329

29 Jun 2021 — There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper license management of the device, as a result, the license file can be applied and affect integrity of the device. Affected product versions include:S12700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S1700 V200R010C00SPC300,V200R011C00,V200R011C00S... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-resourcemanagement-en •

CVSS: 7.2EPSS: 0%CPEs: 10EXPL: 0

CVE-2021-22377

https://notcve.org/view.php?id=CVE-2021-22377

22 Jun 2021 — There is a command injection vulnerability in S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC500 and S7700 V200R019C00SPC500. A module does not verify specific input sufficiently. Attackers can exploit this vulnerability by sending malicious parameters to inject command. This can compromise normal service. Se presenta una vulnerabilidad de inyección de comandos en S12700 V200R019C00SPC500, S2700 V200R019C00SPC500, S5700 V200R019C00SPC500, S6700 V200R019C00SPC... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210602-01-cmdinj-en • CWE-20: Improper Input Validation •

CVSS: 5.3EPSS: 0%CPEs: 75EXPL: 0

CVE-2021-22321

https://notcve.org/view.php?id=CVE-2021-22321

22 Mar 2021 — There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500. • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 26EXPL: 0

CVE-2020-1866

https://notcve.org/view.php?id=CVE-2020-1866

13 Jan 2021 — There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V5... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en • CWE-125: Out-of-bounds Read •

CVSS: 7.5EPSS: 0%CPEs: 59EXPL: 0

CVE-2019-19397

https://notcve.org/view.php?id=CVE-2019-19397

13 Dec 2019 — There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks. Se presenta una vulnerabilidad de algoritmo débil en algunos productos Huawei. Los productos afectados utilizan algoritmos débiles por defecto. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-vrp-en •

CVSS: 7.8EPSS: 0%CPEs: 112EXPL: 0

CVE-2019-5285

https://notcve.org/view.php?id=CVE-2019-5285

04 Jun 2019 — Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service (DoS) condition. (Vulnerability ID: HWPSIRT-2019-03109) Algunos conmutadores de la serie S de Huawei tienen una vulnerabilidad DoS. Un atacante remoto no autorizado puede enviar paquetes diseñados al dispositivo afectad... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190522-01-switch-en • CWE-20: Improper Input Validation •

CVSS: 4.3EPSS: 0%CPEs: 38EXPL: 0

CVE-2017-15327

https://notcve.org/view.php?id=CVE-2017-15327

11 Apr 2018 — S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S7700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R008C06, V200R009C00, V200R010C00, S9700 V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R008C00, V200R009C00, V200R010C00 have an improper authorization vulnerab... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180328-01-authentication-en • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 0

CVE-2016-8785

https://notcve.org/view.php?id=CVE-2016-8785

09 Mar 2018 — Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200R007C00 have an input validation vulnerability. Due to the lack of input validation, an attacker may craft a malformed packet and send it to the device using VRP, causing the device to display additional memory data and possibly leading to sensitive information leakage. Huawei S12700 V200R007C00, V200R008C00; S5700 V200R007C00; S7700 V200R002C00, V200R005C00, V200R006C0... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161228-04-vrp-en • CWE-20: Improper Input Validation •