EUVD-2014-9504

Malware in sbrugna...

EUVD-2014-9503

Malware in sbrugna...

EUVD-2014-9499

Malware in sbrugna...

Code injection

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

Design/Logic Flaw

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

Design/Logic Flaw

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9691

Huawei Tecal vulnerabilities CVE-2014-9691 affect multiple Tecal server models (e.g., RH1288 V2, RH2265 V2, RH2288 V2, RH5885 etc.) and variants listed in the Huawei advisory. The issue is an information disclosure via the web UI Online Users page, allowing logged-in users’ session IDs to be view...

CVE-2014-9695

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

CVE-2014-9693

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9692

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9693

The CVE-2014-9693 entry concerns Huawei Tecal server products (e.g., RH1288 V2, RH2265 V2, RH2285 V2, RH5885, XH31x, DH3xx, CHx, etc.) where DNS processing can mishandle data length, enabling an attacker to execute arbitrary code or cause a system restart via crafted DNS packets. Root cause: insu...

PT-2017-6389

Name of the Vulnerable Software and Affected Versions Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier Description The issue allows an operator to modify the user configuration of iMana through privilege escalation in the Hyper Module Management HMM software. Recommendations For...

PT-2017-6388

Name of the Vulnerable Software and Affected Versions Huawei Tecal E9000 Chassis versions V100R001C00SPC160 and earlier Description The issue allows a non-super-domain user who accesses the Hyper Module Management HMM software through SNMPv3 to perform operations on a server as a super-domain use...

CVE-2014-9695: Undefined Security Weakness

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user...

CVE-2014-9692: Exposure of Sensitive Information to an Unauthorized Actor

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9696: Undefined Security Weakness

The Hyper Module Management HMM software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation...

CVE-2014-9693: Undefined Security Weakness

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9691: Exposure of Sensitive Information to an Unauthorized Actor

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

CVE-2014-9694: Cross-Site Request Forgery (CSRF)

Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117...

PT-2017-6387

Name of the Vulnerable Software and Affected Versions Huawei Tecal RH1288 V2 versions V100R002C00SPC107 and earlier Huawei Tecal RH2265 V2 version V100R002C00 Huawei Tecal RH2285 V2 versions V100R002C00SPC115 and earlier Huawei Tecal RH2268 V2 version V100R002C00 Huawei Tecal RH2288 V2 versions...