44 matches found
CVE-2017-17222
Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...
Remote code execution
Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...
CVE-2017-17221
CVE-2017-17221 affects Huawei eSpace devices (7950 V200R003C30 and 8950 V200R003C00; V200R003C30). The issue is a remote code execution vulnerability in the Import Signal Tone function triggered after a signal tone is uploaded, caused by insufficient verification of received packets. An authentic...
CVE-2017-17222
Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...
CVE-2017-17223
Huawei eSpace 7910, 7950, and 8950 devices (V200R003C30/0: eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00/0; V200R003C30) are affected by a directory traversal vulnerability. An authenticated, remote attacker can craft a specific URL, exploiting insufficient URL verific...
CVE-2017-8950
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...
CVE-2017-8950
HP SiteScope (HP) versions 11.2x–11.3x are affected by CVE-2017-8950, a vulnerability in the ss_pu.jar crypto library that uses a broken or risky cryptographic algorithm, enabling partial information disclosure of credentials. Root cause: use of weak crypto; impact: potential exposure of sensitiv...
Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability
Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...
Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability (CNVD-2018-02550)
Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...
CVE-2016-8950
CVE-2016-8950 affects IBM Emptoris Sourcing 9.5.x–10.1.x and is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM security bulletin confirms this vulnerability and provi...
HPE SiteScope contains multiple vulnerabilities
Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...
F5 Networks BIG-IP : TMM vulnerability (K82851041)
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...
CVE-2015-8950
arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...
CVE-2015-8950
CVE-2015-8950 affects the Linux kernel (arch/arm64/mm/dma-mapping.c) prior to 4.0.3, where uninitialized data structures in the ION memory-management path can be exposed via dma_mmap. This local-access vulnerability could allow a non-privileged user to read kernel memory. The public references in...
Huawei eSpace Denial of Service Vulnerability
Huawei eSpace 8950 is a series of VoIP products. A denial of service vulnerability exists in versions prior to Huawei eSpace 8950 V200R003C00SPC300, which allows remote attackers to cause a denial of service via a large number of crafted ARP packets...
CVE-2015-8230
Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...
Memory corruption
Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...
CVE-2015-8230
Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service memory consumption and restart via a large number of crafted ARP packets...
CVE-2015-8230
CVE-2015-8230 affects Huawei eSpace 8950 IP phones (before V200R003C00SPC300). The issue is a memory leak caused by handling crafted ARP packets, leading to memory exhaustion and device restart (DoS). Public descriptions confirm the vulnerability exists in the eSpace 8950 line and that Huawei rel...
