CVE-2017-17169

The CVE-2017-17169 vulnerability affects Huawei CIDAM protocol implementations across multiple Huawei product families (DP300, RP200, TE30/40/50/60, eSpace U1981, etc.) as listed in the NVD entry. Root cause is insufficient input validation of specific CIDAM protocol messages, allowing an authent...

CVE-2017-17170

The CVE-2017-17170 issue concerns multiple input-validation vulnerabilities in Huawei’s CIDAM protocol across various DP300, RP200, TE30/TE40/TE50/TE60, eSpace U1981, and related platform versions. An authenticated remote attacker could send specially crafted CIDAM messages to trigger abnormal be...

CVE-2017-17304

CVE-2017-17304 covers CIDAM Protocol input validation vulnerabilities in Huawei CIDAM implementations. The issue affects Huawei DP300, RP200, TE30/TE40/TE50/TE60 (and eSpace U1981) across extensive firmware versions (listed in the sources). An authenticated remote attacker could send a crafted me...

PT-2018-6425

Name of the Vulnerable Software and Affected Versions: DP300 versions V500R002C00 through V500R002C00SPCa00 RP200 versions V500R002C00SPC200 through V600R006C00SPC500 TE30 versions V100R001C10SPC300 through V600R006C00SPC500 TE40 versions V500R002C00SPC600 through V600R006C00SPC500 TE50 versions...

CVE-2017-17168: Improper Input Validation

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17169: Improper Input Validation

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17170: Improper Input Validation

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17304: Improper Input Validation

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17303: Exposure of Sensitive Information to an Unauthorized Actor

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900;...

PT-2018-6427

Name of the Vulnerable Software and Affected Versions: DP300 versions V500R002C00 through V500R002C00SPCa00 RP200 versions V500R002C00SPC200 through V600R006C00SPC500 TE30 versions V100R001C10SPC300 through V600R006C00SPC500 TE40 versions V500R002C00SPC600 through V600R006C00SPC500 TE50 versions...

PT-2018-6477

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V500R002C00SPCa00 Huawei RP200 version V500R002C00SPC200 Huawei TE30 versions V100R001C10 through V100R001C10SPC900 Huawei TE30 versions V500R002C00SPC200 through V500R002C00SPCb00 Huawei TE40 version...

PT-2018-6478

Name of the Vulnerable Software and Affected Versions: DP300 versions V500R002C00 through V500R002C00SPCa00 RP200 versions V500R002C00SPC200 through V600R006C00SPC500 TE30 versions V100R001C10SPC300 through V600R006C00SPC500 TE40 versions V500R002C00SPC600 through V600R006C00SPC500 TE50 versions...

PT-2018-6424

Name of the Vulnerable Software and Affected Versions: DP300 versions V500R002C00 through V500R002C00SPCa00 RP200 versions V500R002C00SPC200 through V600R006C00SPC500 TE30 versions V100R001C10SPC300 through V600R006C00SPC500 TE40 versions V500R002C00SPC600 through V600R006C00SPC500 TE50 versions...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Multiple Huawei products CIDAM protocol information leakage vulnerability

Huawei DP300 etc. are products of Huawei, China.DP300 is a videoconferencing terminal.RP200 is an all-in-one videoconferencing device.CIDAM is one of the message transfer protocols. An information disclosure vulnerability exists in the CIDAM protocol in several Huawei products due to the...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability (CNVD-2017-38105)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Security Advisory - Information Disclosure Vulnerability in CIDAM Protocol on Huawei Products

Part of Huawei Products use the CIDAM protocol, which contains sensitive information in the message when it is implemented. So these products has an information disclosure vulnerability. An authenticated remote attacker could track and get the message of a target system. Successful exploit could...

Security Advisory - Multiple Input Validation Vulnerabilities in CIDAM Protocol on Huawei Products

The CIDAM Protocol on Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the attacker...