CVE-2017-17147

CVE-2017-17147 affects Huawei DP300 (V500R002C00) where the XML parser has an integer overflow due to missing input validation. An authenticated local attacker can craft specific XML files to the device, trigger parsing, and cause a Denial of Service. The issue is documented across multiple sourc...

CVE-2017-17303

CVE-2017-17303 covers an information-disclosure vulnerability in Huawei CIDAM protocol implementations. An authenticated remote attacker can intercept CIDAM messages and obtain sensitive information from affected Huawei devices (e.g., DP300, TE-series, V and SPC/SPC-SPC/SPCb00 models). Root cause...

CVE-2017-17217

The CVE-2017-17217 issue affects Huawei MGCP on DP300, RP200, TE/V series devices (e.g., DP300 V500R002C00; V600R006C00; TE30/TE40/TE50/TE60 V100R001C10/V500R002C00/V600R006C00) with an out-of-bounds write due to insufficient validation of crafted packets. An unauthenticated remote attacker can s...

CVE-2017-17148

Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks...

CVE-2017-17220

CVE-2017-17220 concerns the SCCPX module in Huawei DP300, RP200, V600R006C00, TE series (various versions) where an invalid memory access vulnerability exists. An unauthenticated, remote attacker can send malformed packets with specific parameters, taking advantage of insufficient validation to i...

CVE-2017-17219

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote...

CVE-2017-17303

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900;...

CVE-2017-17147

Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks...

CVE-2017-17218

CVE-2017-17218 is an out-of-bounds read vulnerability in Huawei SCCPX module across multiple Huawei devices (e.g., DP300, RP200, V600R006C00, TE series) including DP300 V500R002C00; RP200 V500R002C00; TE60/TE50/TE40/TE30 V100R001C10/V500R002C00/V600R006C00 and related variants. An unauthenticated...

CVE-2017-17199

CVE-2017-17199 affects Huawei DP300, RP200, V500R002C00/V600R006C00, TE30/TE40/TE50/TE60 series; the issue is an out-of-bounds read caused by improper processing of malformed H323 messages. A remote attacker控制 a server can send malformed H323 reply messages to a target device, potentially causing...

CVE-2017-17167

CVE-2017-17167 affects Huawei DP300 (V500R002C00), TP3206 (V100R002C00), and ViewPoint 9030 (V100R011C02/V100R011C03) due to use of a broken or risky cryptographic algorithm in SSL. The root cause is reliance on weak crypto algorithms for SSL, enabling a remote unauthenticated attacker to potenti...

CVE-2017-17219

CVE-2017-17219 affects the SCCPX module in multiple Huawei products (e.g., DP300, RP200, V-series, TE-series) and is described as an invalid memory access vulnerability. An unauthenticated, remote attacker can craft malformed packets with specific parameters due to insufficient validation, potent...

CVE-2017-17150

CVE-2017-17150 describes a DoS in Huawei devices caused by insufficient validation in the Timergrp module . Affected products include Huawei DP300, RP200, V600R006C00, TE30/40/50/60 series with various V numbers listed in the description. The underlying issue is improper parameter validation whic...

Input validation

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

Buffer overflow

Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500...

CVE-2017-17143

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100;...

Buffer overflow

SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900; V500R002C00SPCa00; RP200 V500R002C00SPC200; V600R006C00; V600R006C00SPC200; RSE6500 V500R002C00SPC100;...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

CVE-2017-17138

PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700 V200R006C10...