Buffer overflow

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

CVE-2016-5234: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videoconference devices with software before V500R002C00SPC100, when an unspecified service is enabled, allows remote attackers to execute arbitrary code via a...

HUAWEI VP9660 and RSE6500 Malformed Message Buffer Overflow Vulnerability

HUAWEI VP9660 and RSE6500 are the new generation of videoconferencing end products from Huawei, China. A buffer overflow vulnerability exists in the processing of malformed messages in the HUAWEI VP9660 and RSE6500, which can be exploited by remote attackers to send a special request to crash the...

Huawei VP9660 Multi-Point Control Unit Detection (SNMP)

SNMP based detection of Huawei VP9660 Multi-Point Control Unit MCU. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei VP9660 Multi-Point Control Unit Multiple Vulnerabilities (huawei-sa-20151111-01-vp9660)

Huawei VP9660 Multi-Point Control Unit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Huawei VP9660信息泄露漏洞

VP9660是华为视频会议系统的多媒体控制单元。 华为VP9660产品存在服务端未对输入完全做校验的安全漏洞。在使用内置WebServer场景下, 攻击者以业务管理员身份登录到设备后，通过构造修改特定报文信息发送到服务端，可以注入恶意命令，从而导致信息泄露，设备不可用。 前提条件： 1. 攻击者能够以业务管理员身份登录VP9660成功； 2. VP9660在使用内置WebServer场景下存在该漏洞; 攻击步骤：...

Huawei VP9660远程安全绕过漏洞

No description provided by source...

Huawei VP9660 Information Disclosure Vulnerability

The Huawei VP9660 is a multipoint controller for Huawei's video conferencing system. Huawei VP9660 versions prior to V200R001C30SPC700, the embedded web server does not properly validate constructed messages, which can be exploited by remote administrators to log in to the system and obtain...

CVE-2015-8227

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message...

Design/Logic Flaw

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message...

CVE-2015-8227

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message...

CVE-2015-8227

Huawei VP9660 Multi-Point Control Unit (firmware before V200R001C30SPC700) is affected by CVE-2015-8227. The built-in web server fails to validate certain crafted messages, enabling remote administrators to log in with elevated access to obtain sensitive information or cause a denial of service. ...

CVE-2015-8227: Improper Input Validation

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message...

Huawei VP9660 Remote Security Bypass Vulnerability

Huawei VP9660 is a new generation of professional full HD video conferencing endpoints from Huawei, China. A remote security bypass vulnerability exists in the Huawei VP9660. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Security Advisory - Input Validation Vulnerability in Huawei VP9660 Products

VP9660 is the multi-point control unit of Huawei Video Conference system. The server of the Huawei VP9660 does not validate the input when using build-in WebServer. In such case, an attacker could log in to the device as an business administrator, graft a message to change the specific informatio...