CVE-2020-9075

CVE-2020-9075 affects Huawei Secospace USG6300/USG6300E (V500R001C30/V500R001C50/V500R001C60/V500R001C80/V500R005C00/V500R005C10/V600R006C00). The root cause is insufficient input verification in these devices, enabling an attacker with limited privileges to access a specific directory and potent...

CVE-2017-17314

The CVE-2017-17314 issue affects Huawei DP300, RP200, TE30/TE40/TE50/TE60 platforms (versions listed in the initial entry). It is an invalid memory access vulnerability caused by insufficient input validation of certain fields in malformed SCCP messages, which unauthenticated attackers can send t...

CVE-2017-17258

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-17310

The CVE-2017-17310 vulnerability affects Huawei ENUM (Electronic Numbers to URI Mapping) module in multiple devices (DP300, RP200, TE30, TE40, TE50, TE60 with various V/R versions). The root cause is insufficient verification of values in specially crafted ENUM packets, allowing an unauthenticate...

CVE-2017-17308

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...

CVE-2017-17308

The CVE-2017-17308 issue affects Huawei SCCPX module in multiple DP300/RP200/V600R/TE series devices (DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30/TE40/TE50/TE60 V100R001C10/V500R002C00/V600R006C00). It is described as an invalid memory access vulnerability caused by insufficient packe...

CVE-2017-15314

Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600,...

CVE-2017-15314

Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC200, V500R002C00SPC500, V500R002C00SPC600, V500R002C00SPC700, V500R002C00SPC900, V500R002C00SPCb00, V600R006C00, TE40 V500R002C00SPC600,...

CVE-2017-17303

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900;...

Input validation

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote...

CVE-2017-17303

Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B018; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500R002C00SPC600; V500R002C00SPC800; V500R002C00SPC900;...

CVE-2017-17150

Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the...

CVE-2017-17217

The CVE-2017-17217 issue affects Huawei MGCP on DP300, RP200, TE/V series devices (e.g., DP300 V500R002C00; V600R006C00; TE30/TE40/TE50/TE60 V100R001C10/V500R002C00/V600R006C00) with an out-of-bounds write due to insufficient validation of crafted packets. An unauthenticated remote attacker can s...

CVE-2017-17220

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote...

CVE-2017-17219

CVE-2017-17219 affects the SCCPX module in multiple Huawei products (e.g., DP300, RP200, V-series, TE-series) and is described as an invalid memory access vulnerability. An unauthenticated, remote attacker can craft malformed packets with specific parameters due to insufficient validation, potent...

CVE-2017-17150

CVE-2017-17150 describes a DoS in Huawei devices caused by insufficient validation in the Timergrp module . Affected products include Huawei DP300, RP200, V600R006C00, TE30/40/50/60 series with various V numbers listed in the description. The underlying issue is improper parameter validation whic...

CVE-2017-17281

The CVE-2017-17281 entry affects Huawei SFTP module in multiple products (e.g., Huawei DP300: V500R002C00; RP200: V600R006C00; TE30: V100R001C10; TE40/TE50/TE60: V500R002C00; V600R006C00 variants). The root cause is an out-of-bounds read in the SFTP component, allowing a remote, authenticated att...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

CVE-2017-17134

The CVE-2017-17134 issue affects Huawei devices (DP300, RP200, V600R006C00, TE30/40/50/60, V500R002C00, etc.) where the XML parser fails to properly validate specially crafted XML files. The root cause is improper handling during parsing, leading to a null pointer dereference that can be triggere...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...