95 matches found
Information disclosure
There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...
CVE-2021-22320
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...
CVE-2021-22310
There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...
CVE-2021-22321
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...
CVE-2021-22321
CVE-2021-22321 is a Huawei use-after-free vulnerability affecting multiple Huawei network devices (e.g., S5700, S6700, S7700, S9700, NIP6x00, Secospace USG6xxx, USG9500). The underlying issue is memory mismanagement in a module that cannot handle specific operations in certain scenarios, leading ...
CVE-2021-22320
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...
CVE-2021-22320
Summary of CVE-2021-22320 (Huawei) A denial-of-service vulnerability exists in several Huawei network devices where a module fails to properly handle certain messages, allowing an attacker to trigger a DoS by sending malicious messages. Affected products include IPS Module, NGFW Module, NIP6600, ...
CVE-2021-22310
There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions includ...
CVE-2021-22310
CVE-2021-22310 describes an information-leakage vulnerability in multiple Huawei products caused by improper storage of sensitive data in log files. When a user logs in, an attacker may access logged information. Affected products and versions include Huawei NIP6300 (V500R001C00/C20/C30), NIP6600...
CVE-2020-9213
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...
CVE-2020-9213
There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...
CVE-2020-9213
CVE-2020-9213 is a Huawei denial-of-service vulnerability affecting multiple Huawei products (NGFW Module, NIP6300/6600/6800, Secospace USG6300/6500/6600, SG9500). The issue arises from improper handling of specific network packets, allowing an attacker to craft many such packets and cause some s...
Huawei Data Communication: Denial of Service Vulnerability in Some Huawei Products (huawei-sa-20201111-02-dos)
There is a denial of service vulnerability in some Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Huawei Data Communication: Command Injection Vulnerability in Some Huawei Products (huawei-sa-20201111-02-injection)
Some Huawei products have a command injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2020-9127
Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...
CVE-2020-1847
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...
Denial of service
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...
Command injection
Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300...
CVE-2020-1847
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...
CVE-2020-1847
CVE-2020-1847 is a denial-of-service vulnerability affecting Huawei devices, including NIP6300/NIP6600, Secospace USG6300/USG6500/USG6600, and USG9500, with firmware versions V500R001C30 and V500R001C60. The root cause is lack of protection against a specific protocol attack scenario, enabling re...