EUVD-2014-8962

Malware in sbrugna...

Huawei USG9500 Resource Management Error Vulnerability

Huawei USG9500 is a firewall appliance for large-scale environments from China's Huawei. The device provides up to T-class processing performance and 99.999\% reliability, and integrates multiple security features such as NAT, VPN, IPS, virtualization, and service awareness to help enterprises...

Huawei USG9500 资源管理错误漏洞

Huawei USG9500 is a firewall appliance for large-scale environments from China's Huawei. The device provides up to T-class processing performance and 99.999\% reliability, and integrates multiple security features such as NAT, VPN, IPS, virtualization, and service awareness to help enterprises...

Huawei IPS Module和Huawei USG9500 输入验证错误漏洞

Huawei IPS Module is an intrusion prevention system IPS module. Huawei USG9500 is a firewall appliance used in large environments. An information disclosure vulnerability exists in several Huawei products, which stems from a block that does not adequately validate input. An attacker with elevated...

CVE-2021-22309: Use of Insufficiently Random Values

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions...

Huawei USG9500 Information Disclosure Vulnerability (CNVD-2021-24917)

Huawei USG9500 is a data center firewall product. An information disclosure vulnerability exists in the Huawei USG9500. The vulnerability stems from the program not properly handling information during user login. An attacker can exploit this vulnerability to perform certain operations to obtain...

Huawei USG9500 安全特征问题漏洞

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.Huawei USG9520 is a firewall appliance for large environments.Huawei USG9560 is a firewall appliance for large environments.Huawei USG9560 is a firewall appliance for large environments. An informati...

Huawei NIP6800, Secospace USG6600 and USG9500 Out-of-Bounds Read Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An out-of-bounds read vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

Huawei NIP6800, Secospace USG6600 and USG9500 Denial of Service Vulnerabilities

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A denial of service vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which arises from ...

Huawei USG9500 IPSec Buffer Overflow Vulnerability

The Huawei USG9500 is a Huawei firewall device. A memory management error exists in the Huawei USG9500 IPSec processing of a message, resulting in a 1-byte out-of-bounds read, which can be exploited by a remote attacker to submit a special request that can crash or restart the application...

The vulnerability of Huawei USG9500’s microprogramming software allows a intruder to compromise the confidentiality and integrity of the protected information.

The vulnerability of Huawei USG9500’s microprogramming network interface card is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Huawei USG9500 Credential Mismanagement Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500, which arises from the program failing to properly manage credentials. An attacker could exploit the vulnerability to cause information leakage or corruption, compromising th...

Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00217)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker could exploit this vulnerability to cause a denial of service...

Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00216)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker can exploit this vulnerability to cause a denial of service dead loop with a malicious...

Huawei USG9500 Denial of Service Vulnerability (CNVD-2020-00215)

Huawei USG9500 is a data center firewall product from Huawei, China. A denial of service vulnerability exists in the implementation of X.509 in the Huawei USG9500 V500R001C30 and V500R001C60 versions. An attacker could exploit this to cause a denial of service with a malicious certificate...

Huawei USG9500 Missing Integrity Check Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500 V500R001C30 version and V500R001C60 version, which stems from a lack of integrity checks in the program. An attacker can exploit the vulnerability to make malicious...

CVE-2018-7994: Missing Release of Resource after Effective Lifetime

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when...

Huawei USG9500 Denial of Service Vulnerability

Huawei USG9500 is a firewall product from Huawei China. A denial of service vulnerability exists in the Huawei USG9500 V500R001C50 version, which arises from the program failing to adequately perform input validation. A remote attacker can exploit this vulnerability by sending malformed IKE packe...

CVE-2014-9137: Cross-Site Request Forgery (CSRF)

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack...