CVE-2020-1843

Huawei HEGE-560 version 1.0.1.20SP2, OSCA-550 version 1.0.0.71SP1, OSCA-550A version 1.0.0.71SP1, OSCA-550AX version 1.0.0.71SP2, and OSCA-550X version 1.0.0.71SP2 have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physica...

PT-2020-15116

Name of the Vulnerable Software and Affected Versions Huawei HEGE-560 version 1.0.1.20SP2 OSCA-550 version 1.0.0.71SP1 OSCA-550A version 1.0.0.71SP1 OSCA-550AX version 1.0.0.71SP2 OSCA-550X version 1.0.0.71SP2 Description The issue is related to insufficient verification, allowing an attacker to...

CVE-2020-1855: Undefined Security Weakness

Huawei HEGE-570 version 1.0.1.22SP3; and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit...

PT-2020-15122

Name of the Vulnerable Software and Affected Versions Huawei HEGE-570 version 1.0.1.22SP3 Huawei HEGE-560 version 1.0.1.21SP3 Huawei OSCA-550 version 1.0.1.21SP3 Huawei OSCA-550A version 1.0.1.21SP3 Huawei OSCA-550AX version 1.0.1.21SP3 Huawei OSCA-550X version 1.0.1.21SP3 Description The issue i...

CVE-2019-5613: Insufficient Verification of Data Authenticity

In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated...

CVE-2020-1843: Undefined Security Weakness

Huawei HEGE-560 version 1.0.1.20SP2, OSCA-550 version 1.0.0.71SP1, OSCA-550A version 1.0.0.71SP1, OSCA-550AX version 1.0.0.71SP2, and OSCA-550X version 1.0.0.71SP2 have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physica...

Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

NewStart CGSL CORE 5.05 / MAIN 5.05 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0258)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has pacemaker packages installed that are affected by multiple vulnerabilities: - A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker coul...

Design/Logic Flaw

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

CVE-2019-5291: Insufficient Verification of Data Authenticity

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

PT-2019-17562

Name of the Vulnerable Software and Affected Versions Huawei products affected versions not specified Description The issue is related to insufficient verification of data authenticity. A remote, unauthenticated attacker can intercept specific packets between two devices, modify them, and send th...

CVE-2019-5246

Smartphones with software of ELLE-AL00B 9.1.0.109C00E106R1P21, 9.1.0.113C00E110R1P21, 9.1.0.125C00E120R1P21, 9.1.0.135C00E130R1P21, 9.1.0.153C00E150R1P21, 9.1.0.155C00E150R1P21, 9.1.0.162C00E160R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters...

CVE-2019-5246

Smartphones with software of ELLE-AL00B 9.1.0.109C00E106R1P21, 9.1.0.113C00E110R1P21, 9.1.0.125C00E120R1P21, 9.1.0.135C00E130R1P21, 9.1.0.153C00E150R1P21, 9.1.0.155C00E150R1P21, 9.1.0.162C00E160R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters...

Design/Logic Flaw

Smartphones with software of ELLE-AL00B 9.1.0.109C00E106R1P21, 9.1.0.113C00E110R1P21, 9.1.0.125C00E120R1P21, 9.1.0.135C00E130R1P21, 9.1.0.153C00E150R1P21, 9.1.0.155C00E150R1P21, 9.1.0.162C00E160R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters...

CVE-2019-5229

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

Design/Logic Flaw

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

CVE-2019-5246

CVE-2019-5246 affects ELLE-AL00B smartphones (versions 9.1.0.109/113/125/135/153/155/162) and is caused by insufficient verification of parameters. The vulnerability allows an attacker to gain high privileges on a device after connecting to the phone, potentially leading to denial of service or a...

PT-2019-17519

Name of the Vulnerable Software and Affected Versions P30 smartphones versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 Description The issue is related to insufficient verification of certain parameters. An attacker needs to connect to the phone and gain high privilege to launch the attack...

PT-2019-17529

Name of the Vulnerable Software and Affected Versions ELLE-AL00B versions 9.1.0.109C00E106R1P21 through 9.1.0.162C00E160R2P1 Description The issue is related to insufficient verification of certain parameters. An attacker needs to connect to the phone and gain high privilege to launch the attack...

CVE-2019-5229: Insufficient Verification of Data Authenticity

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...