CVE-2020-1825

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service DoS vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successf...

CVE-2020-1825

CVE-2020-1825 affects Huawei FusionAccess prior to version 6.5.1.SPC002. The root cause is insufficient input verification in FusionAccess, enabling remote DoS when an attacker sends specially crafted messages to an affected device via another device on the same network. The impact described in t...

PT-2020-15102

Name of the Vulnerable Software and Affected Versions FusionAccess versions prior to 6.5.1.SPC002 Description The issue is related to insufficient verification of specific input, allowing attackers to exploit it by sending constructed messages to the affected device through another device on the...

CVE-2020-1825: Improper Input Validation

FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service DoS vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successf...

Security Advisory - Denial of Service Vulnerability in Huawei FusionAccess Product

There is a Denial of Service DoS vulnerability in Huawei FusionAccess Product. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through other device on the same network. Successful exploit could cau...

Huawei FusionAccess Input Validation Vulnerability

Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution from Huawei China. The system distributes, maintains, and recycles virtual desktops for users through a graphical Portal interface. An input validation vulnerability exists in Huawei FusionAccess...

CVE-2016-8779

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

CVE-2016-8779

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

Design/Logic Flaw

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

CVE-2015-7844

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable...

Design/Logic Flaw

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable...

CVE-2016-8779

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

CVE-2015-7844

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable...

CVE-2016-8779

CVE-2016-8779 affects Huawei FusionAccess (software versions V100R005C10 and V100R005C20). A lack of input validation allows remote attackers with specific permissions to inject LDAP operations into a particular input variable, enabling access to sensitive information from the database. The vulne...

CVE-2015-7844

CVE-2015-7844 affects Huawei FusionAccess on software versions V100R005C10 and V100R005C20. The vulnerability arises from insufficient input verification, allowing an attacker to craft and send malformed HDP protocol packets. This can cause the virtual cloud desktop to display an error and become...

PT-2017-7281

Name of the Vulnerable Software and Affected Versions Huawei FusionAccess versions V100R005C10, V100R005C20 Description The issue allows attackers to craft and send a malformed HDP protocol packet, causing the virtual cloud desktop to display an error and become unusable. Recommendations For...

PT-2017-9807

Name of the Vulnerable Software and Affected Versions Huawei FusionAccess versions V100R005C10 through V100R005C20 Description The issue allows remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable,...

CVE-2015-7844: Improper Input Validation

Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable...

CVE-2016-8779: Undefined Security Weakness

Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...

Command Injection Vulnerability in Huawei FusionAccess

Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution from Huawei, China. The system distributes, maintains, and recycles virtual desktops for users through a graphical Portal interface. A command injection vulnerability exists in Huawei FusionAccess...