Security Advisory - Buffer Error Vulnerability in Some Huawei Product

There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected products. Due to insufficient input validation of some value, successful exploit may cause some service abnormal. Vulnerability ID: HWPSIRT-2017-08234 This...

CVE-2020-9233: Improper Authentication

FusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit the vulnerability to delete some files and cause some services abnormal...

Huawei Data Communication: Five Vulnerabilities in Some Huawei Products (huawei-sa-20191211-01-ssp)

There is an out-of-bounds read vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-9071

There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of the intended buffer when parsing certain message, an authenticated attacker could exploit this vulnerability by sending crafted messages to the device. Successful exploit may cau...

Huawei Data Communication: Buffer Overflow Vulnerability in Some Huawei Products (huawei-sa-20171215-01-overflow)

There is buffer overflow vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

Design/Logic Flaw

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187C00E60R4P11; versions earlier than 10.0.0.187C00E60R4P11; versions earlier than 10.0.0.176C00E60R2P11;9.1.0.135C00E133R2P1; versions earlier than...

PT-2020-15080

Name of the Vulnerable Software and Affected Versions HUAWEI smartphones versions earlier than 10.0.0.188C00E62R2P11 HUAWEI smartphones versions earlier than 10.0.0.187C00E60R4P11 HUAWEI smartphones versions earlier than 10.0.0.180C185E3R3P3 HUAWEI smartphones versions earlier than...

Security Advisory - Out of Bounds Read Vulnerability in Several Smartphones

There is an out of bound read vulnerability in several smartphones. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal. Vulnerability ID:...

Input validation

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

Out-of-bounds

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156C00E156R2P4 has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information...

CVE-2020-1806

CVE-2020-1806 affects Huawei Honor V10 smartphones with versions earlier than 10.0.0.156 (C00E156R2P4). The vulnerability stems from a driver that does not sufficiently validate certain parameters, causing several bytes out-of-bounds read. Potential impact includes information disclosure or servi...

CVE-2020-1805

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156 (C00E156R2P4) are affected by out-of-bounds read vulnerabilities in a driver that fails to validate certain parameters, potentially causing information disclosure or service abnormality. CVE-2020-1805 is the second of three relate...

Double free

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions...

CVE-2020-1862

The CVE-2020-1862 entry concerns a double free vulnerability in Huawei products, affecting CampusInsight V100R019C00 and ManageOne 6.5.RC2.B050. A local, low-privilege attacker could trigger memory mismanagement, potentially causing service abnormality. Public documentation confirms affected prod...

Security Advisory - Double Free Vulnerability in Some Huawei Products

There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Vulnerability ID: HWPSIRT-2019-09024 This vulnerability has...

Security Advisory - Resource Management Error Vulnerability on Some Huawei Products

Some Huawei products have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices...

PT-2020-15129

Name of the Vulnerable Software and Affected Versions NIP6800 versions V500R001C30 through V500R005C00 S12700 versions V200R008C00 S2700 versions V200R008C00 S5700 versions V200R008C00 S6700 versions V200R008C00 S7700 versions V200R008C00 S9700 versions V200R008C00 Secospace USG6600 versions...

PT-2019-17540

Name of the Vulnerable Software and Affected Versions Huawei products AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 affected versions not specified...

CVE-2019-5293: Missing Release of Memory after Effective Lifetime

Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability by sending specific messages continuously. Successful exploit may cause some service to be abnormal...

CVE-2019-5294: Out-of-bounds Read

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal...