Integer overflow vulnerability in multiple Huawei products (CNVD-2018-05078)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An integer overflow vulnerability exists in multiple Huawei products, where the vulnerability stems from a program failing to adequately perform input...

Integer Overflow Vulnerability in Multiple Huawei Products

Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An integer overflow vulnerability exists in multiple Huawei products, which is due to the device failing to adequately validate some fields in a messag...

MGCP protocol out-of-bounds read vulnerability in multiple Huawei products

Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. An out-of-bounds read vulnerability exists in the MGCP protocol of several Huawei products, which is due to the program's failure to adequately verify...

Memory leak vulnerability in multiple Huawei products (CNVD-2018-02543)

Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. A memory disclosure vulnerability exists in multiple Huawei products due to the device failing to properly free the memory requested to process XML dat...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Timergrp module denial of service vulnerability in multiple Huawei products

Huawei DP300, RP200, and TE30/40/50/60 are Huawei's all-in-one desktop and high-definition videoconferencing end products for high-end customers. A denial-of-service vulnerability exists in the Timergrp module of multiple Huawei products due to the program's failure to adequately check parameters...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability (CNVD-2017-38105)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Multiple Huawei products CIDAM protocol information leakage vulnerability

Huawei DP300 etc. are products of Huawei, China.DP300 is a videoconferencing terminal.RP200 is an all-in-one videoconferencing device.CIDAM is one of the message transfer protocols. An information disclosure vulnerability exists in the CIDAM protocol in several Huawei products due to the...

Huawei DP300 CIDAM Protocol Input Checksum Vulnerability (CNVD-2017-38106)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

Huawei DP300 XML Parser Integer Overflow Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. An integer overflow vulnerability exists in the Huawei DP300 XML parser due to the XML parser failing to adequately validate incoming content. An authenticated, local attacker could launch a denial of service attack by...

Huawei DP300 XML Parser Buffer Overflow Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. A buffer overflow vulnerability exists in the Huawei DP300 XML parser due to the XML parser failing to adequately validate incoming content. An authenticated local attacker can construct a specific XML file and parse it...

Huawei DP300 XML Parser Denial of Service Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. A denial of service vulnerability exists in the Huawei DP300 XML parser due to the product's failure to adequately checksum the malloc call to request memory. An authenticated, local attacker could launch a denial of...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2017-37505)

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2018-00320)

Huawei DP300, RP200, and TE30/40/50/60 are Huawei's all-in-one desktop products and high-definition videoconferencing terminals for high-end customers. A denial of service vulnerability exists in several Huawei products due to insufficient parameter checking when loading the putty comment key. A...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-37726)

Huawei DP300 and others are products of Huawei, China. DP300 is a video conferencing terminal. eSpace U1981 is a voice gateway product. A denial of service vulnerability exists in multiple Huawei products, which stems from a program's failure to properly determine the size of the remaining buffer...

PEM module heap overflow vulnerability in multiple Huawei products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. A heap overflow vulnerability exists in the PEM module of multiple Huawei products, which can be exploited by an authenticated local attacker to launch a denial-of-service attack by constructing a malicious certificate th...

Multiple Huawei Products XML Parser Denial of Service Vulnerabilities

Huawei DP300 and RP200 are Huawei's all-in-one desktop SmartTruth products for high-end customers, and the TE series is a high-definition videoconferencing terminal that supports 1080p60. A denial-of-service vulnerability exists in the XML parser of multiple Huawei products. The vulnerability is...

PEM module null pointer access vulnerability in multiple Huawei products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. A null pointer access vulnerability exists in the PEM module of multiple Huawei products, which can be exploited by an authenticated local attacker to cause a denial-of-service attack by calling the PEM decoder with...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

CVE-2017-2722

DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210TD with software V100R004C10,eSpace 7950 with software V200R003C00 and...