EUVD-2017-11879

Malware in sbrugna...

EUVD-2017-11880

Malware in sbrugna...

CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

CVE-2017-2736

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack...

CVE-2017-2737

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system...

CVE-2017-2737

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system...

CVE-2017-2736

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack...

Privilege escalation

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system...

Command injection

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack...

Authentication flaw

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

CVE-2017-2736

VCM5010 with software versions earlier before V100R002C50SPC100 has a command injection vulnerability. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack...

CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

CVE-2017-2737

VCM5010 with software versions earlier before V100R002C50SPC100 has an arbitrary file upload vulnerability. The software does not validate the files that uploaded. An authenticated attacker could upload arbitrary files to the system...

CVE-2017-2737

CVE-2017-2737 affects Huawei VCM5010 prior to V100R002C50SPC100. The vulnerability is an arbitrary file upload due to the software not validating uploaded files, enabling an authenticated attacker to upload arbitrary files to the system. This is documented across multiple feeds (NVD/NVD copies an...

CVE-2017-2738

CVE-2017-2738 affects Huawei’s VCM5010; versions earlier than V100R002C50SPC100 suffer two flaws: (1) authentication bypass due to improper authentication for web pages, enabling an unauthenticated attacker to bypass login via crafted HTTP requests, and (2) arbitrary file upload due to lack of fi...

CVE-2017-2736

CVE-2017-2736 affects Huawei VCM5010 firmware prior to V100R002C50SPC100, where input validation weaknesses enable authenticated command injection via the affected component. The NVD entry and multiple sources describe an authenticated attacker being able to inject commands due to insufficient va...

Huawei VCM5010 Forensic Bypass Vulnerability

VCM5010 is a video content management platform from China's Huawei Huawei, an all-in-one video big data analysis device. The Huawei VCM5010 suffers from an authentication bypass vulnerability, which allows an attacker to bypass authentication by spoofing HTTP requests due to improper validation o...

Huawei VCM5010 Command Injection Vulnerability

VCM5010 is a video content management platform from China's Huawei Huawei, an all-in-one video big data analysis device. The Huawei VCM5010 suffers from a command injection vulnerability that can be exploited by an attacker to conduct a command injection attack due to insufficient validation of...

Security Advisory - Several Vulnerabilities on the VCM5010

There is a command injection vulnerability on the VCM5010. This is due to insufficient validation of user's input. An authenticated attacker could launch a command injection attack. Vulnerability ID: HWPSIRT-2016-12094 This vulnerability has been assigned a Common Vulnerabilities and Exposures CV...