CVSS: 8.8EPSS: 0%CPEs: 13EXPL: 0CVE-2014-9136
https://notcve.org/view.php?id=CVE-2014-9136
Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface. Huawei FusionManager con software V100R002C03 y V100R003C00 podrían permitir a un atacante remoto no autenticado, llevar a cabo un ataque de CSRF contra el usuario de la interfaz web. • http://www.huawei.com/en/psirt/security-advisories/hw-372186 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.8EPSS: 0%CPEs: 13EXPL: 0CVE-2014-9137
https://notcve.org/view.php?id=CVE-2014-9137
Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface. Huawei USG9500 con software V200R001C01SPC800 y versiones anteriores, V300R001C00; USG2100 con software V300R001C00SPC900 y versiones anteriores; USG2200 con software V300R001C00SPC900; USG5100 con software V300R001C00SPC900 podrían permitir a un atacante remoto no autenticado, llevar a cabo un ataque de CSRF contra el usuario de la interfaz web. • http://www.huawei.com/en/psirt/security-advisories/hw-372186 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2016-8798
https://notcve.org/view.php?id=CVE-2016-8798
Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server. Huawei USG5500 con software V300R001C00 y V300R001C00 permiten a atacantes eludir el módulo anti-DDoS del USGs para provocar una condición de denegación de servicio en el servidor backend. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161026-01-usg-en http://www.securityfocus.com/bid/93891 • CWE-284: Improper Access Control •
CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0CVE-2016-6669
https://notcve.org/view.php?id=CVE-2016-6669
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet. Desbordamiento de búfer en el módulo Authentication, Authorization y Accounting (AAA) en las puertas de entrada de seguridad unificadas USG2100, USG2200, USG5100 y USG5500 en Huawei con software en versiones anteriores a V300R001C10SPC600 permite a servidores RADIUS remotos autenticados ejecutar código arbitrario enviando un paquete EAP manipulado. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160810-01-usg-en http://www.securityfocus.com/bid/92441 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 5EXPL: 0CVE-2015-8084
https://notcve.org/view.php?id=CVE-2015-8084
Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets. Puertas de enlace de seguridad unificadas Huawei USG5500, USG2100, USG2200 y USG5100 con software en versiones anteriores a V300R001C10SPC600, cuando está habilitado 'DHCP Snooping' y ya sea que 'option82 insert' u 'option82 rebuild' estén habilitado en una interfaz, permite a atacantes remotos causar una denegación de servicio (reinicio) a través de paquetes DHCP manipulados. • http://www.securityfocus.com/bid/77300 http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-457916.htm • CWE-20: Improper Input Validation •