Security Advisory - Buffer Overflow Vulnerability on Several Mobile Broadband Products

There is a buffer overflow vulnerability on several mobile broadband products. The software does not sufficiently validate the length of certain fields in DHCP message which is received. Successful exploit could cause the device to reboot. Vulnerability ID: HWPSIRT-2017-09083 This vulnerability h...

CVE-2017-15346

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...

CVE-2017-15346

CVE-2017-15346 describes a denial-of-service vulnerability in Huawei XML parsers. An attacker could craft specific XML files to trigger parsing issues in affected Huawei products (e.g., S12700, S1700, S3700, S5700, S6700, S7700, S9700, and eCNS210_TD variants across multiple firmware versions), d...