Huawei CloudEngine 资源管理错误漏洞

Huawei CloudEngine is a data center switch from Huawei China. Huawei CloudEngine is vulnerable to a resource management error, which can be exploited by attackers to cause a service exception by sending a specific tampered message...

Huawei S5700 and S5800 Denial of Service Vulnerability

A denial-of-service vulnerability exists in the Huawei S5700 and Huawei S6700, both enterprise switches from Huawei of China. The vulnerability stems from a program that does not properly validate input. An attacker could use the vulnerability to cause a service exception on the target device by...

多款华为产品 缓冲区错误漏洞

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

Huawei NIP6800, Secospace USG6600 and USG9500 Memory Leak Vulnerabilities (CNVD-2020-36723)

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.Secospace USG6600 is a next-generation firewall product. A security vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500. An attacker...

Huawei CampusInsight and ManageOne Double Release Vulnerability

Huawei ManageOne and CampusInsight are both products of Huawei, a Chinese company.ManageOne is a set of cloud data center management solutions. ManageOne is a cloud data center management solution that supports unified management of heterogeneous cloud resource pools and provides multi-level VDC...

Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref :...

Memory leak vulnerability in multiple Huawei products (CNVD-2019-38501)

The Huawei AR1200, among others, is an enterprise router from Huawei, a Chinese company. A memory leak vulnerability exists in multiple Huawei products. A remote attacker could exploit the vulnerability by sending a persistent message to cause a service exception...

Windows Kernel - NULL Pointer Dereference in nt!MiOffsetToProtos While Parsing Malformed PE File

Windows Kernel - NULL Pointer Dereference in nt!MiOffsetToProtos While Parsing Malformed PE File We have encountered a Windows kernel crash in nt!MiOffsetToProtos while trying to load a malformed PE image into the process address space as a data file i.e. LoadLibraryExLOADLIBRARYASDATAFILE |...

Reply Resource Management Error Vulnerability

DEEPLY is a toolkit for DEEP structure manipulation that provides out-of-the-box DEEP merge/clone functionality. A resource management error vulnerability exists in deeply versions prior to 3.1.0, which arises from a failure of a networked system or product to manage system resources e.g., memory...

Multiple Huawei Products Cross-Border Read Vulnerability

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An out-of-bounds read vulnerability exists in several Huawei products, where the program fails to adequately perform input validation of values in message...

SCCPX Module Denial of Service Vulnerability in Multiple Huawei Products

Huawei DP300 and so on are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is a video conferencing all-in-one device.SCCPX module is one of the signaling link control modules. A security vulnerability exists in the SCCPX module in several Huawei products, which stems from t...

SCCP module buffer overflow vulnerability in multiple Huawei products

Huawei DP300, RP200, TE series, etc. are all-in-one desktop SmartZen and all-in-one video conferencing terminal products of Huawei China Company. A buffer overflow vulnerability exists in the SCCP module of multiple Huawei products, which is due to the device failing to adequately validate user...

Multiple Huawei products cross-border read vulnerability (CNVD-2018-05437)

Huawei AR120-S and others are router products from Huawei China. An out-of-bounds read vulnerability exists in multiple Huawei products, which stems from a program failing to adequately validate input. A remote attacker could exploit the vulnerability by sending a specially crafted signature to t...

Huawei MHA-AL00A Resource Management Error Vulnerability

The Huawei MHA-AL00A is a smartphone product from the Chinese company Huawei Huawei. A resource management error vulnerability exists in Huawei MHA-AL00A MHA-AL00AC00B125 version, which originates from the system failing to properly lock resources when processing a registered operation. An attack...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37732)

Huawei AR120-S and others are router products from Huawei China. A memory leak vulnerability exists in multiple Huawei products due to a program failing to properly free allocated memory for processing messages. A remote attacker could exploit the vulnerability by sending specially crafted H323...

Null Pointer Reference Vulnerability in Multiple Huawei Products

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products

Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37976)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...