CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

128 matches found

CVE•added 2018/04/19 2:00 p.m.•83 views

CVE-2018-7920

CVE-2018-7920 affects Huawei AR series devices (AR1200, AR160, AR200, AR2200, AR3200) with an improper resource management vulnerability related to ACL handling. The root cause is an incorrect ACL implementation that allows a remote attacker to send TCP messages to the management interface, poten...

7.5CVSS7.5AI score0.00874EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/04/19 12:00 a.m.•5 views

CVE-2018-7920: Uncontrolled Resource Consumption

Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the...

7.5CVSS7.3AI score0.00874EPSS

SaveExploits0References2

BDU FSTEC•added 2018/03/16 12:00 a.m.•14 views

The vulnerability of the SCTP message verification mechanism in Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers allows a hacker to trigger a system reboot.

The vulnerability of the SCTP message verification mechanism in microprogramming software for Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers is caused by a full integer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot using a specially craft...

7.8CVSS5.6AI score0.01353EPSS

SaveExploits0References2

OSV•added 2018/03/09 5:29 p.m.•19 views

CVE-2017-17330

Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00; V500R001C20; V500R002C00 have a memory leak vulnerability. The software does not release allocated memory properly when parse XM...

3.3CVSS5.8AI score0.00218EPSS

SaveExploits0References1

NVD•added 2018/03/09 5:29 p.m.•30 views

CVE-2017-17330

3.3CVSS3.8AI score0.00218EPSS

SaveExploits0References1

Prion•added 2018/03/09 5:29 p.m.•30 views

Memory corruption

2.1CVSS3.9AI score0.00218EPSS

SaveExploits0References1Affected Software2

Cvelist•added 2018/03/09 5:00 p.m.•52 views

CVE-2017-17330

3.8AI score0.00218EPSS

SaveExploits0References1

CVE•added 2018/03/09 5:00 p.m.•87 views

CVE-2017-17250

CVE-2017-17250 describes an out-of-bounds write in several Huawei router/enterprise products (e.g., AR120-S/AR1200/AR1200-S/AR150/AR160/AR200/AR200-S/AR2200-S/AR3200/AR510, NetEngine16EX, SRG1300/2300/3300, V200R005C32/V200R007C00). The root cause is insufficient input verification when processin...

7.1CVSS6.7AI score0.01038EPSS

SaveExploits0References1Affected Software1

CVE•added 2018/03/09 5:00 p.m.•85 views

CVE-2017-17330

The CVE-2017-17330 entry concerns a memory-leak vulnerability in Huawei AR3200 and NGFW Module devices. The flaw is triggered when parsing XML element data, where allocated memory is not properly released, potentially causing a service to run out of memory after an attacker uploads a crafted XML ...

3.3CVSS4AI score0.00218EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/03/09 12:00 a.m.•9 views

CVE-2017-17330: Missing Release of Resource after Effective Lifetime

3.3CVSS5.3AI score0.00218EPSS

SaveExploits0References2

OSV•added 2018/02/15 4:29 p.m.•14 views

CVE-2017-17295

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.3CVSS6.1AI score0.01218EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•36 views

CVE-2017-17291

5.5CVSS5.3AI score0.00207EPSS

SaveExploits0References1

OSV•added 2018/02/15 4:29 p.m.•14 views

CVE-2017-15344

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker coul...

7.5CVSS5.8AI score0.01353EPSS

SaveExploits0References1

OSV•added 2018/02/15 4:29 p.m.•16 views

CVE-2017-15343

7.5CVSS5.8AI score0.01353EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•36 views

Input validation

2.1CVSS4.4AI score0.00207EPSS

SaveExploits0References1Affected Software26

NVD•added 2018/02/15 4:29 p.m.•30 views

CVE-2017-15344

7.8CVSS7.6AI score0.01353EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•24 views

Integer overflow

7.8CVSS7.5AI score0.01353EPSS

SaveExploits0References1Affected Software3

NVD•added 2018/02/15 4:29 p.m.•33 views

CVE-2017-15343

7.8CVSS7.6AI score0.01353EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•37 views

CVE-2017-15341

Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE50 V600R006C00, TE60 V600R006C00 have a denial of service vulnerability. The software decodes X.509 certificate in an improper way. A remote unauthenticated attacker could send a crafted X.509 certificate to the device. Successful exploi...

7.5CVSS7.4AI score0.00759EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•27 views

Integer overflow

7.8CVSS7.5AI score0.01353EPSS

SaveExploits0References1Affected Software3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by