Memory Out-of-Bounds Access Vulnerability in PEM Module for Multiple Huawei Products

Huawei DP300, IPS Module, and NGFW Module are all products of Huawei China. The memory out-of-bounds access vulnerability in the PEM Module of several Huawei products can be exploited by an authenticated local attacker to launch a denial-of-service attack by constructing a malicious certificate...

Security Advisory - Multiple Vulnerabilities of PEM Module in Some Huawei Products

There is a null pointer reference vulnerability in PEM module of Huawei products due to insufficient verification. An authenticated local attacker calls PEM decoder with special parameter, which could cause a denial of service. Vulnerability ID: HWPSIRT-2017-06047 This vulnerability has been...