Huawei DP300 XML Parser Buffer Overflow Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. A buffer overflow vulnerability exists in the Huawei DP300 XML parser due to the XML parser failing to adequately validate incoming content. An authenticated local attacker can construct a specific XML file and parse it...

Huawei DP300 XML Parser Integer Overflow Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. An integer overflow vulnerability exists in the Huawei DP300 XML parser due to the XML parser failing to adequately validate incoming content. An authenticated, local attacker could launch a denial of service attack by...

Huawei DP300 XML Parser Denial of Service Vulnerability

Huawei DP300 is a video conferencing endpoint from Huawei, a Chinese company. A denial of service vulnerability exists in the Huawei DP300 XML parser due to the product's failure to adequately checksum the malloc call to request memory. An authenticated, local attacker could launch a denial of...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2017-37505)

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

PT-2017-14759

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14756

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14758

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14757

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14755

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14743

Name of the Vulnerable Software and Affected Versions Huawei DP300 version V500R002C00 Secospace USG6300 versions V500R001C00 through V500R001C50 Secospace USG6500 versions V500R001C00 through V500R001C50 Secospace USG6600 versions V500R001C00 through V500R001C50 TP3206 version V100R002C00 VP9660...

PT-2017-14753

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14752

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14754

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

Multiple Huawei Products XML Parser Denial of Service Vulnerabilities

Huawei DP300 and RP200 are Huawei's all-in-one desktop SmartTruth products for high-end customers, and the TE series is a high-definition videoconferencing terminal that supports 1080p60. A denial-of-service vulnerability exists in the XML parser of multiple Huawei products. The vulnerability is...

PEM module heap overflow vulnerability in multiple Huawei products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. A heap overflow vulnerability exists in the PEM module of multiple Huawei products, which can be exploited by an authenticated local attacker to launch a denial-of-service attack by constructing a malicious certificate th...

PEM module null pointer access vulnerability in multiple Huawei products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. A null pointer access vulnerability exists in the PEM module of multiple Huawei products, which can be exploited by an authenticated local attacker to cause a denial-of-service attack by calling the PEM decoder with...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2018-00320)

Huawei DP300, RP200, and TE30/40/50/60 are Huawei's all-in-one desktop products and high-definition videoconferencing terminals for high-end customers. A denial of service vulnerability exists in several Huawei products due to insufficient parameter checking when loading the putty comment key. A...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-37726)

Huawei DP300 and others are products of Huawei, China. DP300 is a video conferencing terminal. eSpace U1981 is a voice gateway product. A denial of service vulnerability exists in multiple Huawei products, which stems from a program's failure to properly determine the size of the remaining buffer...

PT-2017-14727

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V500R001C00 through V500R001C30 Huawei NGFW Module versions V500R001C00 through V500R002C00 Huawei NIP6300 versions V500R001C00 through V500R001C30 Huawei NIP6600 versions V500R001C0...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...