CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

CVE-2021-22320

Summary of CVE-2021-22320 (Huawei) A denial-of-service vulnerability exists in several Huawei network devices where a module fails to properly handle certain messages, allowing an attacker to trigger a DoS by sending malicious messages. Affected products include IPS Module, NGFW Module, NIP6600, ...

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

CVE-2020-9213

CVE-2020-9213 is a Huawei denial-of-service vulnerability affecting multiple Huawei products (NGFW Module, NIP6300/6600/6800, Secospace USG6300/6500/6600, SG9500). The issue arises from improper handling of specific network packets, allowing an attacker to craft many such packets and cause some s...

File Upload Vulnerability in NS-NGFW Backend of Netcom Next-Generation Firewalls

hereinafter referred to as Netcom was founded in 2004, is specialized in providing operators, finance, government, education, health care, enterprises, hotels, export integrated application gateway. A file upload vulnerability exists in the background of NS-NGFW. Attackers can utilize the...

File Upload Vulnerability in the Frontend of NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

Netcom Next Generation Firewall NGFW is a high-performance firewall that can comprehensively address application layer threats. A file upload vulnerability exists in the frontend of NS-NGFW, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in NGFW of Netcom NGFW

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Huawei Data Communication: Out-of-bounds Write Vulnerability in Some Huawei Products (huawei-sa-20200715-01-outofboundswrite)

Multiple Huawei products are prone to an out of bounds vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-9101

There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected...

Cross site scripting

There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected...

CVE-2020-9101

CVE-2020-9101 is an out-of-bounds write vulnerability affecting Huawei IPS/NGFW/Secospace USG family (e.g., USG6300/6500/6600, NGFW, IPS modules) with firmware versions V500R001C30/C60 and V500R005C00/C10. The issue arises from insufficient validation of malformed packets, allowing an unauthentic...

CVE-2020-9101

There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot. Affected...

Incorrect Authentication Vulnerability in Multiple Huawei Products (CNVD-2021-93841)

The Huawei USG9500 is a data center firewall product, the NGFW Module is a next-generation firewall NGFW module, and the NIP6800 is an intrusion prevention system. Multiple Huawei products are vulnerable to incorrect authentication. An attacker could exploit the vulnerability to gain certain...

Huawei Products Improper Authentication Vulnerability (huawei-sa-20200506-02-authentication)

Multiple Huawei products are prone to an improper authentication vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10;...

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10;...

Authentication flaw

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10;...

CVE-2020-9099

CVE-2020-9099 affects Huawei enterprise devices: IPS/NGFW modules and USG/NIP series (NIP6300/6600/6800; Secospace USG6300/6500/6600/USG9500) with specific V500R0xxC0x/v500R005C0x builds. The vulnerability is described as improper authentication that could allow an unauthenticated attacker to per...

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10;...