PT-2017-14758

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PT-2017-14757

Name of the Vulnerable Software and Affected Versions Huawei AR120-S versions V200R006C10 through V200R008C30 Huawei AR1200 versions V200R006C10 through V200R008C30 Huawei AR1200-S versions V200R006C10 through V200R008C30 Huawei AR150 versions V200R006C10 through V200R008C30 Huawei AR150-S versio...

PEM module heap overflow vulnerability in multiple Huawei products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. A heap overflow vulnerability exists in the PEM module of multiple Huawei products, which can be exploited by an authenticated local attacker to launch a denial-of-service attack by constructing a malicious certificate th...

IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38287)

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...

PT-2017-14727

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V500R001C00 through V500R001C30 Huawei NGFW Module versions V500R001C00 through V500R002C00 Huawei NIP6300 versions V500R001C00 through V500R001C30 Huawei NIP6600 versions V500R001C0...

PT-2017-14731

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300P...

PT-2017-14735

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300P...

PT-2017-14734

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300P...

PT-2017-14763

Name of the Vulnerable Software and Affected Versions Huawei AR3200 versions V200R005C32 through V200R008C30 Huawei NGFW Module versions V500R001C00 through V500R002C00 Description The software has a memory leak issue due to improper release of allocated memory when parsing XML element data. An...

PT-2017-14736

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300P...

PT-2017-14732

Name of the Vulnerable Software and Affected Versions Huawei IPS Module versions V500R001C00 through V500R001C20SPC300PWE NGFW Module versions V500R001C00 through V500R001C20SPC300PWE NIP6300 versions V500R001C00 through V500R001C20SPC300PWE NIP6600 versions V500R001C00 through V500R001C20SPC300P...

PT-2017-14007

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14006

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14008

Name of the Vulnerable Software and Affected Versions Huawei DP300 versions V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, V500R001C00 through V500R002C10 Huawei NIP6300 versions...

PT-2017-14011

Name of the Vulnerable Software and Affected Versions Huawei DP300 V500R002C00 Huawei IPS Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R001C50 Huawei NGFW Module versions V100R001C10 through V100R001C30, versions V500R001C00 through V500R002C10 Huawei NIP6300...

PT-2017-14014

Name of the Vulnerable Software and Affected Versions Huawei IPS Module version V500R001C00 NGFW Module version V500R001C00 NIP6300 version V500R001C00 NIP6600 version V500R001C00 Secospace USG6300 version V500R001C00 Secospace USG6500 version V500R001C00 Secospace USG6600 version V500R001C00...

Memory corruption

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of servi...

CVE-2016-5435

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of servi...

CVE-2016-5435

The CVE-2016-5435 issue affects Huawei security appliances (e.g., IPS Module, NGFW Module, NIP6300/6600, Secospace USG6300/6500/6600/9500 and AntiDDoS8000) in hot standby setups where two devices are not directly connected. The root cause is a memory leak triggered by crafted packets, leading to ...

CVE-2016-5435: Undefined Security Weakness

Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of servi...