Lucene search
+L

55 matches found

CNVD
CNVD
•added 2020/12/11 12:00 a.m.•24 views

Huawei Imanager Neteco 6000 Injection Vulnerability

Huawei Imanager Neteco 6000 is a platform from China's Huawei that provides a management approach for data center infrastructure. The platform can implement unified management for medium-sized and large data centers and multiple data centers, and improve resource utilization in data centers by...

7.8CVSS7.2AI score0.00313EPSS
SaveExploits0References1
Huawei
Huawei
•added 2020/12/09 12:00 a.m.•73 views

Security Advisory - CSV Injection Vulnerability in iManager NetEco Product

There has a CSV injection vulnerability in iManager NetEco Product. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV...

7.8CVSS7.6AI score0.00313EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2020/12/09 12:00 a.m.•22 views

Huawei Imanager Neteco 6000 injection vulnerability

Huawei Imanager Neteco 6000 is a platform from China's Huawei that provides a management approach for data center infrastructure. The platform can implement unified management for medium-sized and large data centers and multiple data centers, and improve resource utilization in data centers by...

7.8CVSS5.8AI score0.00313EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/12/09 12:00 a.m.•4 views

PT-2020-20520

Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00 Description The issue is related to a CSV injection vulnerability. An attacker with common privilege may exploit this vulnerability through some operations to inject CSV files. The vulnerability is due ...

7.8CVSS0.00313EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2020/06/05 12:00 a.m.•34 views

Huawei Data Communication: RCE Vulnerability in Fastjson (huawei-sa-20191204-01-fastjson)

A remote code execution RCE vulnerability exists in the open- source JSON parsing library Fastjson. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

8.2AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/05/26 12:00 a.m.•62 views

Huawei Data Communication: Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20181010-01-debug)

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.2CVSS1.2AI score0.18485EPSS
SaveExploits9References1
osv_cve
osv_cve
•added 2017/11/22 7:29 p.m.•18 views

CVE-2017-8133

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a...

8.8CVSS5.9AI score0.01537EPSS
SaveExploits0References1
NVD
NVD
•added 2017/11/22 7:29 p.m.•23 views

CVE-2017-8133

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a...

8.8CVSS8.9AI score0.01537EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/22 7:29 p.m.•29 views

Command injection

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a...

6.5CVSS8.8AI score0.01537EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2017/11/22 7:00 p.m.•68 views

CVE-2017-8133

CVE-2017-8133 affects Huawei iManager NetEco, specifically software versions V600R008C00 and V600R008C10 . The issue is a command injection caused by insufficient input validation, allowing an authenticated, remote attacker to send malicious packets to a target device and potentially execute comm...

8.8CVSS8.7AI score0.01537EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/11/22 7:00 p.m.•33 views

CVE-2017-8133

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a...

8.9AI score0.01537EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/22 12:00 a.m.•10 views

CVE-2017-8133: Improper Neutralization of Special Elements used in a Command

Huawei iManager NetEco with software V600R008C00 and V600R008C10 has a command injection vulnerability. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a...

8.8CVSS8AI score0.01537EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/06/01 12:00 a.m.•20 views

Huawei Manager NetEco Command Injection Vulnerability

Huawei iManager NetEco is a computer room dynamic loop monitoring system independently developed by Huawei. A command injection vulnerability exists in Huawei iManager NetEco version V600R008C00 and V600R008C10, which originates from the program failing to perform input validation sufficiently. A...

8.8CVSS7.9AI score0.01537EPSS
SaveExploits0References1
Huawei
Huawei
•added 2017/05/31 12:00 a.m.•63 views

Security Advisory - Command Injection Vulnerability in the NetEco

Huawei iManager NetEco has a command injection vulnerability due to insufficient input validation. An authenticated, remote attacker could exploit this vulnerability to send malicious packets to a target device. Successful exploit could enable a low privileged user to execute commands that a high...

8.8CVSS8.8AI score0.01537EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2017/05/31 12:00 a.m.•5 views

PT-2017-18142

Name of the Vulnerable Software and Affected Versions Huawei iManager NetEco versions V600R008C00 through V600R008C10 Description The issue is related to a command injection vulnerability due to insufficient input validation. An authenticated, remote attacker could exploit this vulnerability to...

8.8CVSS0.01537EPSS
SaveExploits0References3
Rows per page
Query Builder