CRYPTO module buffer overflow vulnerability in multiple Huawei products

Huawei DP300, RP200, TE30/40/50/60, TP3106/3206, and ViewPoint 9030 are Huawei's all-in-one Desktop Intelligence products and HD video conferencing terminals for high-end customers. A buffer overflow vulnerability exists in the CRYPTO module of multiple Huawei products, which is due to the progra...

H323 Protocol Null Pointer Reference Vulnerability in Multiple Huawei Products

Huawei AR series routers, DP300, NetEngine16EX and other products from Huawei China. A null pointer reference vulnerability exists in the H323 protocol of multiple Huawei products. The vulnerability is due to the failure of the H323 protocol to adequately verify messages. An attacker can launch a...

H323 Protocol Memory Leakage Vulnerability in Multiple Huawei Products (CNVD-2018-00344)

Huawei AR series routers, DP300, NetEngine16EX and other products from Huawei China. A null pointer reference vulnerability exists in the H323 protocol of multiple Huawei products. The vulnerability is due to the failure of the H323 protocol to adequately verify messages. An attacker can launch a...

Multiple Huawei products H323 protocol out-of-bounds read vulnerability (CNVD-2018-00343)

Huawei AR series routers, DP300, NetEngine16EX and other products from Huawei China. An out-of-bounds read vulnerability exists in the H323 protocol of multiple Huawei products. The vulnerability is due to the failure of the H323 protocol to adequately verify messages. An attacker can initiate an...

CVE-2017-15318

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

CVE-2017-15320

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

CVE-2017-15319

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

CVE-2017-15317

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37503)

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-37726)

Huawei DP300 and others are products of Huawei, China. DP300 is a video conferencing terminal. eSpace U1981 is a voice gateway product. A denial of service vulnerability exists in multiple Huawei products, which stems from a program's failure to properly determine the size of the remaining buffer...

SIP Module Denial of Service Vulnerability in Multiple Huawei Products

Huawei DP300, RP200, RSE6500, TE30/40/50/60 are all products of Huawei China. A denial of service vulnerability exists in the SIP module of multiple Huawei products. The vulnerability is due to the failure of the SIP backup module to properly handle more than a certain amount of peer state. An...

Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products

Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

SIP Module Cache Overflow Vulnerability in Multiple Huawei Products

Huawei DP300, RP200, RSE6500, TE30/40/50/60 are all products of Huawei China. A cache overflow vulnerability exists in the SIP module of multiple Huawei products, which is due to the device failing to adequately validate some of the values in SIP messages. An unauthenticated, remote attacker coul...

H323 Protocol Input Check Vulnerability in Multiple Huawei Products

Huawei AR120-S and others are router products from Huawei China. An input checksum vulnerability exists in the H323 protocol of several Huawei products, which can be exploited by an unauthenticated attacker to send a special H323 message to cause a DOS attack due to insufficient message checksum...

Memory leak vulnerability in several Huawei products

Huawei CloudEngine 12800 and others are CloudEngine series switch products from Huawei, China. A memory leak vulnerability exists in several Huawei products, which stems from the program not freeing memory requested for processing messages. An attacker could cause a denial of service by sending a...

CVE-2017-8207

The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8211

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8210

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8214

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than...

CVE-2017-8215

Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions earlier than KNT-AL10C00B391, versions earlier than KNT-AL20C00B391, versions earlier than...