CVE-2016-8795

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...

CVE-2016-8780

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition...

CVE-2016-8790

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

CVE-2016-8780

CVE-2016-8780 affects Huawei CloudEngine devices: 6800 (V100R006C00), 7800 (V100R006C00), 8800 (V100R006C00), and 12800 (V100R006C00). The issue allows remote attackers with specific permissions to store massive files, exhausting shared storage and causing a DoS. Root cause is improper management...

CVE-2016-8795

CVE-2016-8795 describes an integer overflow in IPFPM handling on several Huawei devices. Affected products include Huawei CloudEngine 12800, 5800, 6800, 7800, 8800 and Secospace USG6600, across multiple OS versions listed in the Huawei advisory. Remote, unauthenticated attackers can craft specifi...

CVE-2016-8790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

CVE-2016-8780: Uncontrolled Resource Consumption

Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition...

CVE-2016-8795: Integer Overflow or Wraparound

Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10,...

Huawei CloudEngine 12800 Switch Memory Disclosure Vulnerability (CNVD-2016-12844)

Huawei CloudEngine 12800 is a switch device from Huawei, China. The Huawei CloudEngine 12800 switch memory leak vulnerability. The memory leak is caused by the LDP processing module not freeing the memory requested for processing messages when it processes messages and finds abnormal values for...

PT-2016-7565

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 versions V100R003C00 through V100R006C00 Description The issue is related to a memory leak that occurs when an unauthenticated attacker sends specific Label Distribution Protocol LDP packets to the devices. If the valu...

Huawei CloudEngine 12800 Switch Memory Leak Vulnerability

Huawei CloudEngine 12800 is a switch device from Huawei, China. The Huawei CloudEngine 12800 switch memory disclosure vulnerability. Due to a lack of validation of certain fields in a message, the LDP Label Distribution Protocol processing module does not free memory requested to process the...

PT-2016-7564

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 versions V100R003C00 through V100R006C00 Description The issue is related to a memory leak. An unauthenticated attacker may send specific Label Distribution Protocol LDP packets to the devices repeatedly. Due to improp...

Denial of Service Vulnerability in Multiple Huawei Switches

Huawei CloudEngine 12800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. A denial of service vulnerability exists in multiple Huawei switches. Due to improper management of device resources, a remote attacker with certain privileges can exploit the vulnerability...

PT-2016-7562

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 6800 version V100R006C00 Huawei CloudEngine 7800 version V100R006C00 Huawei CloudEngine 8800 version V100R006C00 Huawei CloudEngine 12800 version V100R006C00 Description The issue allows remote attackers with specific...

Integer Overflow Vulnerability in Some Huawei Switches

Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. An integer overflow vulnerability exists in some of Huawei's switches. Due to the lack of checksums on specific fields in IPFPM messages, an unauthenticated remote attacke...

PT-2016-7569

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 12800 versions V100R002C00 through V100R006C00 Huawei CloudEngine 5800 versions V100R002C00 through V100R006C00 Huawei CloudEngine 6800 versions V100R002C00 through V100R006C00 Huawei CloudEngine 7800 versions V100R003C00...

Buffer overflow vulnerability in CFM function in multiple Huawei products

CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800, CloudEngine 12800 are Huawei switch devices. A buffer overflow vulnerability exists in the CFM Connectivity Fault Management feature in multiple Huawei products. When the device uses CFM and is configured with MEP Maintenance...

PT-2016-7568

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine 5800 versions prior to V200R001C00SPC700 Huawei CloudEngine 6800 versions prior to V200R001C00SPC700 Huawei CloudEngine 7800 versions prior to V200R001C00SPC700 Huawei CloudEngine 8800 versions prior to V200R001C00SPC700...

Input validation

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote...

CVE-2016-6178

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote...