CVE-2014-9696

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

Design/Logic Flaw

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

Privilege escalation

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

CVE-2014-9695

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

CVE-2014-9696

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

CVE-2014-9696

The CVE-2014-9696 entry concerns Huawei Tecal E9000 Chassis HMM (Hyper Module Management) software. A privilege-escalation flaw in HMM (via IPMICommand) allows an operator to modify the iMana user configuration. Affected: HMM on Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier. Root cause...

CVE-2014-9696: Undefined Security Weakness

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

CVE-2014-9695: Undefined Security Weakness

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

CVE-2016-6898

CVE-2016-6898 affects Huawei E9000 rack servers’ Hyper Management Module (HMM). A XML External Entity (XXE) vulnerability exists in user-supplied XML documents, allowing remote authenticated users to read arbitrary files or cause a web service denial of service. Impact is described as partial con...

Security Advisory - XXE Vulnerability in the E9000

E9000 has an XML External Entity XXE vulnerability when parsing user-supplied XML documents in HMM Hyper Management Module. Attackers could exploit this vulnerability to read arbitrary files and cause a denial of the web service. Vulnerability ID: HWPSIRT-2016-05249 This vulnerability has been...

Security Advisory-Privilege Escalation Vulnerability in IPMICommand of the HMM Software in a Huawei Server Product

The Hyper Module Management HMM software of some Huawei server products has a security vulnerability. When the operator of the HMM software uses the IPMICommand to perform operations on the iMana software, the operator can modify the user configuration of iMana through privilege escalation...

Security Advisory-Privilege Escalation Vulnerability in the HMM Software of a Huawei Server Product

The Hyper Module Management HMM software of some Huawei server products has a security vulnerability. The software has a design defect, enabling a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user vulnerability ID: HWPSIRT-2014-11116...