Security Advisory - DoS Vulnerability in Huawei U1900 CLI Module

Huawei eSpace U1900 switch series provides professional IP voice solutions to meet communications requirements from various enterprises of different sizes. Huawei eSpace U1900 series includes eSpace U1910, U1911, U1930, U1960, U1980, and U1981.

The U1900 series uses the Command Line Interface (CLI) module to process command line login and interaction. The CLI module enables CLI clients to log in to the U1900 devices and to manage and maintain U1900 devices using command lines.

A vulnerability exists in the exception handling mechanism of the U1900 CLI module. An attacker may exploit this vulnerability to launch DoS attacks, which make the CLI function unavailable. (Vulnerability ID: HWPSIRT-2015-08046)