EUVD-2018-19649

Malware in sbrugna...

CVE-2018-7937

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into...

PT-2018-18336

Name of the Vulnerable Software and Affected Versions: Huawei HiRouter-CD20-10 versions prior to 1.9.6 Huawei WS5200-10 versions prior to 1.9.6 Description: The issue is caused by insufficient plug-in verification, allowing an attacker to tamper with a legitimate plug-in and create a malicious on...

CVE-2018-7937: Undefined Security Weakness

In Huawei HiRouter-CD20-10 with the versions before 1.9.6 and WS5200-10 with the versions before 1.9.6, there is a plug-in signature bypass vulnerability due to insufficient plug-in verification. An attacker may tamper with a legitimate plug-in to build a malicious plug-in and trick users into...

CVE-2018-7933

Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into...

PT-2018-18333

Name of the Vulnerable Software and Affected Versions: Huawei HiRouter-CD20 versions prior to 1.9.6 Huawei WS5200 versions prior to 1.9.6 Description: The issue is related to a path traversal vulnerability in Huawei home gateway products. It occurs due to the lack of validation during the...

Huawei HiRouter-CD20 and WS5200 Path Traversal Vulnerability

Huawei HiRouter-CD20 and WS5200 are both home router products released by Huawei China. A path traversal vulnerability exists in the Huawei HiRouter-CD20 HiRouter-CD20-10 prior to version 1.9.6 and the WS5200 WS5200-10 prior to version 1.9.6, which stems from insufficient checksums when the progr...