CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

47 matches found

CVE•added 2018/03/05 7:0 p.m.•67 views

CVE-2017-17138

CVE-2017-17138 is a DoS in the Huawei PEM module caused by insufficient verification, where an authenticated local attacker can trigger a deadloop by presenting a malicious certificate. Affected Huawei products include DP300, IPS, NGFW, NIP6300/6600, RP200, S-series (S12700, S1700, S2700, S5700, ...

5.5CVSS5.2AI score0.00135EPSS

SaveExploits0References1Affected Software1

NVD•added 2018/02/15 4:29 p.m.•31 views

CVE-2017-17291

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.5CVSS5.3AI score0.00207EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•31 views

CVE-2017-17298

5.3CVSS5.6AI score0.00765EPSS

SaveExploits0References1

NVD•added 2018/02/15 4:29 p.m.•26 views

CVE-2017-17166

Huawei DP300 V500R002C00, Secospace USG6300 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, V500R001C50, Secospace USG6600 V500R001C00, V500R001C20, V500R001C30, V500R001C50, TP3206 V100R002C00, VP9660 V500R002C00, V500R002C10 have a...

5.3CVSS5.3AI score0.01261EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•29 views

Input validation

2.1CVSS4.4AI score0.00207EPSS

SaveExploits0References1Affected Software26

Prion•added 2018/02/15 4:29 p.m.•36 views

Memory corruption

5CVSS5.3AI score0.01261EPSS

SaveExploits0References1Affected Software43

Prion•added 2018/02/15 4:29 p.m.•28 views

Buffer overflow

The Common Open Policy Service Protocol COPS module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, NIP6300 V500R001C00, V500R001C20,...

5CVSS5.5AI score0.01218EPSS

SaveExploits0References1Affected Software19

CVE•added 2018/02/15 4:0 p.m.•61 views

CVE-2017-17295

CVE-2017-17295 describes buffer overflow vulnerabilities in numerous Huawei products caused by insufficient validation of SIP package values. An unauthenticated, remote attacker may send crafted SIP packages to affected devices (e.g., AR120-S, AR1200, AR150/AR200 families and others listed) to tr...

5.3CVSS5.6AI score0.01218EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:0 p.m.•35 views

CVE-2017-17166

5.3AI score0.01261EPSS

SaveExploits0References1

Cvelist•added 2018/02/15 4:0 p.m.•29 views

CVE-2017-17291

5.3AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:0 p.m.•68 views

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

5.3CVSS5.3AI score0.01532EPSS

SaveExploits0References1Affected Software1

CVE•added 2018/02/15 4:0 p.m.•61 views

CVE-2017-17291

CVE-2017-17291 is a memory-leak vulnerability in a wide range of Huawei enterprise devices (e.g., AR/AR1200/AR3200/SRG/NetEngine lines, TE/DP300/MAX PRESENCE, etc.). The issue arises when parsing crafted XML files: the software fails to free allocated memory, leading to a memory leak. An authenti...

5.5CVSS5.2AI score0.00207EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:0 p.m.•38 views

CVE-2017-17292

4.5AI score0.00207EPSS

SaveExploits0References1

Cvelist•added 2018/02/15 4:0 p.m.•38 views

CVE-2017-17294

4.4AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:0 p.m.•64 views

CVE-2017-17298

CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...

5.3CVSS5.6AI score0.00765EPSS

SaveExploits0References1Affected Software1

NVD•added 2017/11/22 7:29 p.m.•23 views

CVE-2017-8201

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a...

6.5CVSS6.3AI score0.01105EPSS

SaveExploits0References2

OSV•added 2017/11/22 7:29 p.m.•8 views

CVE-2017-8200

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause...

6.5CVSS5.8AI score0.0112EPSS

SaveExploits0References2

Prion•added 2017/11/22 7:29 p.m.•26 views

Out-of-bounds

4CVSS6.3AI score0.0112EPSS

SaveExploits0References2Affected Software3

Prion•added 2017/11/22 7:29 p.m.•23 views

Out-of-bounds

4CVSS6.3AI score0.0112EPSS

SaveExploits0References2Affected Software3

Prion•added 2017/11/22 7:29 p.m.•20 views

Memory corruption

4CVSS6.3AI score0.01105EPSS

SaveExploits0References2Affected Software3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by