CVE-2016-8773

CVE-2016-8773 affects Huawei S-series switches (S5300, S5700, S6300, S6700, S7700, S9300, S9700, S12700) with listed V200R software versions. The root cause is improper validation of MPLS packets, enabling a remote attacker to cause a denial of service by sending malformed MPLS messages. Impact i...

CVE-2014-8572

CVE-2014-8572 affects Huawei VRP-based devices (e.g., AC6605, ACU, S2300/S3300/S2700/S3700, S5300/S5700/S6300/S6700, S7700/S9300/S9300E/S9700) where the SSH server processes a message without valid checksums, allowing remote attackers to send a crafted SSH packet to cause a denial of service. Con...

CVE-2016-8797

The CVE-2016-8797 entry describes a memory exhaustion issue in Huawei devices caused by abnormal MPLS packets processed by the MPLS module. Affected products include Huawei AR3200 and several S-series switches (S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700) with listed software versions...

Denial of service vulnerability in multiple Huawei switches

Huawei S12700, S5700, S6700, S7700, S9700 are switching devices from Huawei China. A denial of service vulnerability exists in multiple Huawei switches. Due to the lack of input checksums on the device, a remote attacker can exploit the vulnerability to construct malformed Resource Reservation...

Multiple Huawei VRP Platform Switch Input Checksum Vulnerabilities

Huawei S12700, S5700, S7700, S9700 are switching devices from Huawei China. An input checksum vulnerability exists in multiple Huawei VRP platform switches. Due to the lack of input checksum, an attacker can exploit the vulnerability to construct malformed messages to be sent to the VRP, causing...

CVE-2016-6518

Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote attackers to cause a denial of service memory consumption and restart via a large number of malformed packets...

Multiple Huawei Switches Remote Denial of Service Vulnerabilities

The Huawei S7700, S9300, S9700, and S12700 are intelligent routing switches from Huawei, a Chinese company. A remote denial of service vulnerability exists in multiple Huawei Switches. A remote attacker can exploit this vulnerability by sending a large number of malicious packets to cause a denia...

CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate...

CVE-2016-6670

Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficient entropy to generate self-signed certificates, which makes it easier for remote attackers to discover private keys by leveraging knowledge of a certificate...

CVE-2016-6670

Summary: CVE-2016-6670 affects Huawei S7700, S9300, S9700, and S12700 devices running software before V200R008C00SPC500. The root cause is the use of random numbers with insufficient entropy to generate self-signed certificates, enabling remote attackers to more easily recover private keys by exp...

Multiple Huawei products insecure random number generation vulnerability

Huawei S7700 and others are intelligent routing switches from Huawei China. An insecure random number generation vulnerability exists in multiple Huawei products. An attacker can exploit the vulnerability to take control of a flawed device certificate and obtain a private key...

Denial of Service Vulnerability in Multiple Huawei Quidway Switches

The Huawei Quidway S9700, S5700, S5300, S9300, and S7700 are S-series switch products from Huawei, China. A security vulnerability exists in several Huawei Quidway switches. A remote attacker could exploit this vulnerability with specially crafted traffic to cause a denial of service switch reboo...

Security Advisory- SSH Username Information Disclosure Vulnerability in Huawei Campus Switch

Some versions of Huawei Campus switch series products S9300/S9300E/S7700/S9700 /S5700/S6700/S5300/S6300/S2300/S2700/S3300/S3700 are affected by username information disclosure vulnerability. When the maintenance terminal of a Huawei Campus switch uses SSH to log in to a server, attackers can gues...

CVE-2013-4628

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...

CVE-2012-4960

CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...

CVE-2013-4628

The CVE-2013-4628 entry describes an information-disclosure flaw in Huawei Campus Switch devices (Quidway SPU boards S7700, S9300, S9700). The firewall module can allow remote authenticated users to access sensitive information in the high-priority security zone by leveraging access to the low-pr...

CVE-2013-4628

The firewall module on the Huawei Quidway Service Process Unit SPU board S7700, S9300, and S9700 on Huawei Campus Switch devices allows remote authenticated users to obtain sensitive information from the high-priority security zone by leveraging access to the low-priority security zone...