Lucene search

K

DP300, Secospace USG6300,Secospace USG6500,Secospace USG6600,TP3206, VP9660 Security Vulnerabilities

openvas

5.9AI Score

0.002EPSS

2021-11-24 12:00 AM
3
prion
prion

Code injection

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS

5.5AI Score

0.002EPSS

2021-11-23 04:15 PM
1
cve
cve

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS

5.5AI Score

0.002EPSS

2021-11-23 04:15 PM
19
cvelist
cvelist

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

6.2AI Score

0.002EPSS

2021-11-23 03:05 PM
1
openvas

5.2AI Score

0.001EPSS

2021-06-30 12:00 AM
2
prion
prion

Memory corruption

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module...

4.9CVSS

4.9AI Score

0.001EPSS

2021-06-29 08:15 PM
5
cve
cve

CVE-2021-22341

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module...

4.9CVSS

5AI Score

0.001EPSS

2021-06-29 08:15 PM
20
6
cvelist
cvelist

CVE-2021-22341

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module...

6.3AI Score

0.001EPSS

2021-06-29 07:22 PM
openvas

6.7AI Score

0.001EPSS

2021-05-31 12:00 AM
4
prion
prion

Cross site scripting

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service.....

6.5CVSS

6.5AI Score

0.001EPSS

2021-05-27 01:15 PM
3
cve
cve

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service.....

6.5CVSS

6.5AI Score

0.001EPSS

2021-05-27 01:15 PM
22
4
cvelist
cvelist

CVE-2021-22411

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service.....

6.6AI Score

0.001EPSS

2021-05-27 12:12 PM
cnvd
cnvd

Memory Leak Vulnerability in Multiple Huawei Products (CNVD-2022-20325)

Huawei IPS Module is an Intrusion Prevention System (IPS) module from Huawei of China.NGFW Module is a firewall product.Secospace USG6300 is a next-generation firewall product.Secospace USG6600 is a next-generation firewall product. Multiple Huawei products are vulnerable to memory leaks, which...

4.9CVSS

2.6AI Score

2021-05-24 12:00 AM
7
huawei
huawei

Security Advisory - Weak Secure Algorithm Vulnerability in Huawei Product

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak. (Vulnerability ID:...

5.4AI Score

0.002EPSS

2021-05-12 12:00 AM
16
huawei
huawei

Security Advisory - Out-of-Bounds Write Vulnerability in Some Huawei Products

There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service.....

6.5AI Score

0.001EPSS

2021-05-06 12:00 AM
11
huawei
huawei

Security Advisory - Memory Leak Vulnerability in Huawei Products

There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. (Vulnerability ID: HWPSIRT-2020-89990) This vulnerability has been...

5.2AI Score

0.001EPSS

2021-05-06 12:00 AM
17
cve
cve

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product.....

6.5CVSS

6.3AI Score

0.001EPSS

2021-04-08 07:15 PM
40
4
prion
prion

Memory corruption

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product.....

6.5CVSS

6.3AI Score

0.001EPSS

2021-04-08 07:15 PM
3
cvelist
cvelist

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product.....

6.4AI Score

0.001EPSS

2021-04-08 06:18 PM
1
openvas

4.8AI Score

0.0004EPSS

2021-03-29 12:00 AM
4
openvas

7.5AI Score

0.001EPSS

2021-03-29 12:00 AM
1
openvas

5.5AI Score

0.001EPSS

2021-03-29 12:00 AM
openvas

7AI Score

0.001EPSS

2021-03-29 12:00 AM
1
prion
prion

Design/Logic Flaw

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.3CVSS

5.3AI Score

0.001EPSS

2021-03-22 08:15 PM
6
cve
cve

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.3CVSS

5.3AI Score

0.001EPSS

2021-03-22 08:15 PM
33
2
cve
cve

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.4CVSS

4.4AI Score

0.0004EPSS

2021-03-22 07:15 PM
23
cve
cve

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS

7.3AI Score

0.001EPSS

2021-03-22 07:15 PM
42
prion
prion

Information disclosure

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

4.4CVSS

4.5AI Score

0.0004EPSS

2021-03-22 07:15 PM
prion
prion

Denial of service

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS

7.3AI Score

0.001EPSS

2021-03-22 07:15 PM
5
cvelist
cvelist

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include.....

5.3AI Score

0.001EPSS

2021-03-22 07:03 PM
cvelist
cvelist

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.4AI Score

0.001EPSS

2021-03-22 06:41 PM
1
cvelist
cvelist

CVE-2021-22310

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions...

6.2AI Score

0.0004EPSS

2021-03-22 06:38 PM
1
prion
prion

Denial of service

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.4AI Score

0.001EPSS

2021-03-22 06:15 PM
3
cve
cve

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5CVSS

7.3AI Score

0.001EPSS

2021-03-22 06:15 PM
19
2
cvelist
cvelist

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

7.5AI Score

0.001EPSS

2021-03-22 05:39 PM
huawei
huawei

Security Advisory - Use After Free Vulnerability in Huawei Product

There is a use-after-free vulnerability in Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. (Vulnerability ID:...

5.4AI Score

0.001EPSS

2021-02-10 12:00 AM
17
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Huawei Product

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to affected module. This can lead to denial of service. (Vulnerability ID: HWPSIRT-2020-65315) This...

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
12
huawei
huawei

Security Advisory - Memory Leak Vulnerability in Some Huawei Products

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. (Vulnerability...

6.1AI Score

0.001EPSS

2021-02-10 12:00 AM
37
huawei
huawei

Security Advisory - Denial of Service Vulnerability in Some Products

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services abnormal. (Vulnerability ID: HWPSIRT-2020-32540) This vulnerability has...

6.9AI Score

0.001EPSS

2021-02-10 12:00 AM
33
huawei
huawei

Security Advisory - Information Leakage Vulnerability in Some Huawei Products

There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause the information leak. (Vulnerability ID:...

4.8AI Score

0.0004EPSS

2021-02-03 12:00 AM
22
openvas

7AI Score

0.001EPSS

2021-01-19 12:00 AM
3
openvas

7.7AI Score

0.0004EPSS

2021-01-19 12:00 AM
3
openvas
openvas

Huawei Data Communication: Out of Bounds Read Vulnerability in Several Products

There is an out-of-bounds read vulnerability in several...

7AI Score

0.001EPSS

2021-01-19 12:00 AM
3
openvas

7AI Score

0.001EPSS

2021-01-19 12:00 AM
4
cve
cve

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.5AI Score

0.001EPSS

2021-01-13 11:15 PM
20
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.5CVSS

6.4AI Score

0.001EPSS

2021-01-13 11:15 PM
5
cvelist
cvelist

CVE-2020-1866

There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions...

6.6AI Score

0.001EPSS

2021-01-13 10:22 PM
1
cve
cve

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.5AI Score

0.001EPSS

2020-12-24 04:15 PM
41
2
prion
prion

Cross site scripting

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.5CVSS

6.4AI Score

0.001EPSS

2020-12-24 04:15 PM
1
cvelist
cvelist

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service...

6.6AI Score

0.001EPSS

2020-12-24 03:44 PM
Total number of security vulnerabilities490