EUVD-2014-9505

Malware in sbrugna...

CVE-2021-22309: Use of Insufficiently Random Values

There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions...

PT-2021-14947

Name of the Vulnerable Software and Affected Versions: Huawei USG9500 versions V500R001C30SPC200, V500R001C60SPC500, V500R005C00SPC200 Huawei USG9520 version V500R005C00 Huawei USG9560 version V500R005C00 Huawei USG9580 version V500R005C00 Description: The issue is related to an insecure algorith...

PT-2017-14007

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14006

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14011

Name of the Vulnerable Software and Affected Versions Huawei DP300 V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R002C10 Huawei NIP6300...

PT-2017-14008

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

CVE-2016-8796

Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition...

CVE-2016-8796: Improper Input Validation

Huawei USG9520 V300R001C01, USG9560 V300R001C01, and USG9580 V300R001C01 allow unauthenticated attackers to send abnormal DHCP request packets to the affected products to trigger a DoS condition...

PT-2016-7570

Name of the Vulnerable Software and Affected Versions Huawei USG9520 version V300R001C01 Huawei USG9560 version V300R001C01 Huawei USG9580 version V300R001C01 Description The issue is related to a denial of service DoS condition that can be triggered by sending abnormal DHCP request packets to th...

CVE-2016-8277

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service device restart via an unspecified command parameter...

CVE-2016-8278: Improper Input Validation

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote attackers to cause a denial of service device restart via an unspecified URL...

CVE-2016-8277: Improper Input Validation

Huawei USG9520, USG9560, and USG9580 unified security gateways with software before V300R001C01SPCa00 allow remote authenticated users to cause a denial of service device restart via an unspecified command parameter...

PT-2016-7474

Name of the Vulnerable Software and Affected Versions Huawei USG9520, USG9560, and USG9580 unified security gateways versions prior to V300R001C01SPCa00 Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, via an unspecified URL. A remote...

PT-2016-7473

Name of the Vulnerable Software and Affected Versions Huawei USG9520, USG9560, and USG9580 versions prior to V300R001C01SPCa00 Description The issue is related to a denial of service DoS that can be triggered by a remote authenticated user. This is due to the device not validating parameters in a...

Huawei USG9560/9520/9580 Main Processing Unit (MPU) Memory Disclosure Vulnerability

Huawei USG9560/9520/9580 are high-end 10Gb firewall products. A memory leak vulnerability exists in the Huawei USG9560/9520/9580 Main Processing Unit MPU, which can be exploited by an attacker to exhaust memory resources and cause the Main Processing Unit MPU to restart...