CVE-2017-17135

CVE-2017-17135 is a null pointer reference vulnerability in the PEM module of Huawei products, including DP300 family, IPS, NGFW, NIP, S-series, Secospace USG, ViewPoint, TE, TP, USG9500, and related models, due to insufficient verification. An authenticated local attacker can call the PEM decode...

CVE-2017-17137

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700...

CVE-2017-17136

The CVE-2017-17136 issue is a heap overflow in Huawei’s PEM module across multiple products (e.g., DP300, IPS, NGFW, S series, USG, ViewPoint, etc.). Root cause: insufficient verification in the PEM processing flow, allowing an authenticated local attacker to crash the process by presenting a cra...

CVE-2017-17138

CVE-2017-17138 is a DoS in the Huawei PEM module caused by insufficient verification, where an authenticated local attacker can trigger a deadloop by presenting a malicious certificate. Affected Huawei products include DP300, IPS, NGFW, NIP6300/6600, RP200, S-series (S12700, S1700, S2700, S5700, ...

CVE-2017-17135

PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30; NIP6600 V500R001C00; V500R001C30; RP200 V500R002C00; V600R006C00; S12700 V200R007C00; V200R007C01; V200R008C00; V200R009C00; V200R010C00; S1700...

CVE-2017-17300

Huawei S12700 V200R008C00, V200R009C00, S5700 V200R007C00, V200R008C00, V200R009C00, S6700 V200R008C00, V200R009C00, S7700 V200R008C00, V200R009C00, S9700 V200R008C00, V200R009C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specific TCP messages with keychain...

CVE-2017-15333

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...

Design/Logic Flaw

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...

CVE-2017-15333

Huawei’s CVE-2017-15333 affects the XML parser in a wide range of Huawei enterprise switches (examples: S12700, S3700, S5700, S6700, S7700, S9700, eCNS210_TD line) across multiple firmware branches (e.g., V200R005C00, V200R009C00, V200R010C00, V100R006C03/05, V200R001C00…V200R010C00, and others)....

CVE-2016-8797

Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...

CVE-2016-8773

CVE-2016-8773 affects Huawei S-series switches (S5300, S5700, S6300, S6700, S7700, S9300, S9700, S12700) with listed V200R software versions. The root cause is improper validation of MPLS packets, enabling a remote attacker to cause a denial of service by sending malformed MPLS messages. Impact i...

CVE-2016-8797

The CVE-2016-8797 entry describes a memory exhaustion issue in Huawei devices caused by abnormal MPLS packets processed by the MPLS module. Affected products include Huawei AR3200 and several S-series switches (S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700) with listed software versions...

Denial of Service Vulnerability in Multiple Huawei Products

Huawei S12700 and others are intelligent routing switches from Huawei China. A denial of service vulnerability exists in several Huawei products, which stems from a lack of input detection in the program. A remote attacker can exploit the vulnerability by sending specially crafted Resource...

Multiple Huawei VRP Platform Switch Input Checksum Vulnerabilities

Huawei S12700, S5700, S7700, S9700 are switching devices from Huawei China. An input checksum vulnerability exists in multiple Huawei VRP platform switches. Due to the lack of input checksum, an attacker can exploit the vulnerability to construct malformed messages to be sent to the VRP, causing...

Denial of service vulnerability in multiple Huawei switches

Huawei S12700, S5700, S6700, S7700, S9700 are switching devices from Huawei China. A denial of service vulnerability exists in multiple Huawei switches. Due to the lack of input checksums on the device, a remote attacker can exploit the vulnerability to construct malformed Resource Reservation...

CVE-2015-8086

The CVE-2015-8086 issue affects Huawei AR routers and several Quidway/S-series devices: AR routers with software before V200R007C00SPC100; S9300 before V200R009C00; S12700 before V200R008C00SPC500; S9300/S5300/S5300 before V200R007C00; and S5700 before V200R007C00SPC500. Root cause: information d...

CVE-2015-8085

The CVE-2015-8085 entry concerns Huawei AR routers and several Quidway/S5300/S5700 series devices where passwords could be obtained or decrypted due to the use of a reversible encryption algorithm. Affected software versions include Huawei AR routers pre-V200R007C00SPC100 and the listed Quidway/S...

CVE-2016-6518

Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service memory consumption and restart via a large number of malformed packets...

Multiple Huawei Switches Remote Denial of Service Vulnerabilities

The Huawei S7700, S9300, S9700, and S12700 are intelligent routing switches from Huawei, a Chinese company. A remote denial of service vulnerability exists in multiple Huawei Switches. A remote attacker can exploit this vulnerability by sending a large number of malicious packets to cause a denia...

CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate...