EUVD-2017-11843

Malware in sbrugna...

CVE-2014-4705: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and AC...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700

The CVE-2017-2700 entry affects Huawei AC6005 and AC6605 devices running V200R006C10, where a DoS can be triggered by malformed packets. The underlying cause is insufficient input validation to parsed network data, leading to memory leakage and partial to full service disruption (DoS). Connected ...

CVE-2017-2700: Missing Release of Resource after Effective Lifetime

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-8147: Improper Input Validation

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

OSPF Protocol MaxAge LSA Denial of Service Vulnerability in Multiple Huawei Products

AC6005 is a wireless access controller AC AccessController from Huawei Technologies Co. the AR1200 and AR3200 are router products. the AR207 is the base model in Huawei's AR200 series of enterprise routers. A denial of service vulnerability exists in the MaxAge LSA in the OSPF protocol of multipl...

PT-2017-18156

Name of the Vulnerable Software and Affected Versions AC6005 version V200R006C10SPC200 AC6605 version V200R006C10SPC200 AR1200 versions V200R005C10CP0582T through V200R005C10HP0581T, V200R005C20SPC026T AR200 version V200R005C20SPC026T AR3200 version V200R005C20SPC026T CloudEngine 12800 versions...

CVE-2015-6586

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

CVE-2015-6586

The CVE-2015-6586 issue affects Huawei WLAN AC6005, AC6605, and ACU2 devices with software prior to V200R006C00SPC100. The mDNS module fails to restrict unicast query processing to the link-local network, enabling remote attackers to obtain sensitive information through information disclosure. Th...

CVE-2015-6586: Exposure of Sensitive Information to an Unauthorized Actor

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

PT-2017-15487

Name of the Vulnerable Software and Affected Versions Huawei AC6005 versions V200R006C10 Huawei AC6605 versions V200R006C10 Description The issue is related to a lack of adequate input validation, allowing an attacker to send malformed packets to the device. This results in device memory leaks,...

CVE-2016-6824: Improper Input Validation

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

PT-2016-7122

Name of the Vulnerable Software and Affected Versions Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 Description The issue is related to an input validation problem in Huawei access controllers, allowing remote authenticated users to cause a deni...

Multiple Huawei WLAN AC Products Information Disclosure Vulnerability

Huawei WLAN AC6005 and others are wireless access controller products from Huawei China. An information disclosure vulnerability exists in the mDNS module module of multiple Huawei WLAN AC products. An attacker can exploit the vulnerability to disclose sensitive information...

PT-2015-7304

Name of the Vulnerable Software and Affected Versions Huawei WLAN AC6005 versions prior to V200R006C00SPC100 Huawei WLAN AC6605 versions prior to V200R006C00SPC100 Huawei WLAN ACU2 versions prior to V200R006C00SPC100 Description The issue concerns the mDNS module in Huawei WLAN AC products, which...