CVE-2018-5781

Mitel Connect ONSITE (R1711-PREM and earlier) and Mitel ST (14.2 GA28 and earlier) contain a PHP code injection vulnerability in the conferencing component. An unauthenticated attacker can send specially crafted requests to the vendrecording.php page to inject and execute arbitrary PHP code withi...

CVE-2018-5781

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could...

CVE-2018-5779

Mit el Connect ONSITE (R1711-PREM and earlier) and Mitel ST (14.2 GA28 and earlier) contain a conferencing-component vulnerability that allows an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute it via specially crafted requests, enabling arbitr...

Security feature bypass

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of th...

CVE-2017-16251

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of th...

CVE-2017-16251

The CVE-2017-16251 entry concerns Mitel ST’s conferencing component (GA28 and earlier). A vulnerability exists where an authenticated user can upload a malicious script to the Personal Library via a crafted POST request, potentially allowing arbitrary code execution within the application context...

CVE-2017-16251

A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could allow an authenticated user to upload a malicious script to the Personal Library by a crafted POST request. Successful exploit could allow an attacker to execute arbitrary code within the context of th...

CVE-2017-17199

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323...

CVE-2017-17151

Huawei AR100, AR100-S, AR110-S, AR120, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR200-S, AR2200, AR2200-S, AR3200, AR510, DP300, NetEngine16EX, RP200, SRG1300, SRG2300, SRG3300, TE30, TE40, TE50, TE60, TP3106, TP3206, ViewPoint 8660, and ViewPoint 9030 have an insufficient...

Multiple Huawei Products Read Across Boundaries Vulnerability

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An out-of-bounds read vulnerability exists in several Huawei products due to the program failing to properly handle malformed H323 messages. A remote...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2018-05079)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. A denial of service vulnerability exists in multiple Huawei products, which stems from a program that fails to adequately perform input validation. A remo...

Integer overflow vulnerability in multiple Huawei products (CNVD-2018-05082)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An integer overflow vulnerability exists in multiple Huawei products, where the vulnerability stems from a program failing to adequately perform input...

Integer overflow vulnerability in multiple Huawei products (CNVD-2018-05077)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An integer overflow vulnerability exists in multiple Huawei products, where the vulnerability stems from a program failing to adequately perform input...

Multiple Huawei products cross-border read vulnerability (CNVD-2018-05434)

Huawei DP300 and so on are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device.SIP Session Initiation Protocol is one of the session initiation protocol modules. An out-of-bounds read vulnerability exists in the SIP Session Initiation...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2018-05436)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An out-of-bounds read vulnerability exists in several Huawei products due to the program failing to properly handle malformed H323 messages. A remote...

Integer overflow vulnerability in multiple Huawei products (CNVD-2018-05078)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An integer overflow vulnerability exists in multiple Huawei products, where the vulnerability stems from a program failing to adequately perform input...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2018-05080)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. A buffer overflow vulnerability exists in multiple Huawei products, which stems from a program failing to perform input validation adequately. A remote...

MGCP protocol out-of-bounds read vulnerability in multiple Huawei products

Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An out-of-bounds read vulnerability exists in the MGCP protocol of several Huawei products, which is due to the program's failure to adequately verify...

Multiple Huawei products H323 protocol out-of-bounds read vulnerability (CNVD-2018-00343)

Huawei AR series routers, DP300, NetEngine16EX and other products from Huawei China. An out-of-bounds read vulnerability exists in the H323 protocol of multiple Huawei products. The vulnerability is due to the failure of the H323 protocol to adequately verify messages. An attacker can initiate an...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability (CNVD-2017-38104)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...