EUVD-2017-11843

Malware in sbrugna...

CVE-2014-4705: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and AC...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700

The CVE-2017-2700 entry affects Huawei AC6005 and AC6605 devices running V200R006C10, where a DoS can be triggered by malformed packets. The underlying cause is insufficient input validation to parsed network data, leading to memory leakage and partial to full service disruption (DoS). Connected ...

CVE-2017-2700

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-2700: Missing Release of Resource after Effective Lifetime

AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks...

CVE-2017-8147: Improper Input Validation

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

PT-2017-18156

Name of the Vulnerable Software and Affected Versions AC6005 version V200R006C10SPC200 AC6605 version V200R006C10SPC200 AR1200 versions V200R005C10CP0582T through V200R005C10HP0581T, V200R005C20SPC026T AR200 version V200R005C20SPC026T AR3200 version V200R005C20SPC026T CloudEngine 12800 versions...

CVE-2015-6586

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

CVE-2015-6586

The CVE-2015-6586 issue affects Huawei WLAN AC6005, AC6605, and ACU2 devices with software prior to V200R006C00SPC100. The mDNS module fails to restrict unicast query processing to the link-local network, enabling remote attackers to obtain sensitive information through information disclosure. Th...

CVE-2015-6586: Exposure of Sensitive Information to an Unauthorized Actor

The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network...

PT-2017-15487

Name of the Vulnerable Software and Affected Versions Huawei AC6005 versions V200R006C10 Huawei AC6605 versions V200R006C10 Description The issue is related to a lack of adequate input validation, allowing an attacker to send malformed packets to the device. This results in device memory leaks,...

CVE-2014-8572

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

CVE-2014-8572

CVE-2014-8572 affects Huawei VRP-based devices (e.g., AC6605, ACU, S2300/S3300/S2700/S3700, S5300/S5700/S6300/S6700, S7700/S9300/S9300E/S9700) where the SSH server processes a message without valid checksums, allowing remote attackers to send a crafted SSH packet to cause a denial of service. Con...

CVE-2014-8572: Improper Input Validation

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003,...

CVE-2016-6824: Improper Input Validation

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service device restart via crafted CAPWAP packets...

PT-2016-7122

Name of the Vulnerable Software and Affected Versions Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 Description The issue is related to an input validation problem in Huawei access controllers, allowing remote authenticated users to cause a deni...

PT-2015-7304

Name of the Vulnerable Software and Affected Versions Huawei WLAN AC6005 versions prior to V200R006C00SPC100 Huawei WLAN AC6605 versions prior to V200R006C00SPC100 Huawei WLAN ACU2 versions prior to V200R006C00SPC100 Description The issue concerns the mDNS module in Huawei WLAN AC products, which...

PT-2014-8625

Name of the Vulnerable Software and Affected Versions Huawei AC6605 versions V200R001C00 through V200R002C00 Huawei ACU versions V200R001C00 through V200R002C00 Huawei S2300, S3300, S2700, S3700 versions prior to V100R006C05 Huawei S5300, S5700, S6300, S6700 versions prior to V200R005C00SPC300...