CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

CVE-2017-17299

CVE-2017-17299 affects multiple Huawei router-like devices (e.g., AR120-S/AR1200/AR150/AR160/AR200/AR2200/AR3200/AR3600/AR510, IPS/NIP/NetEngine16EX, and related models) where an unauthenticated, remote attacker can establish via crafted IKEv2 messages due to insufficient input validation. The un...

CVE-2017-17298

CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...

CVE-2017-17292

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

Multiple Huawei products cross-border read vulnerability (CNVD-2018-05437)

Huawei AR120-S and others are router products from Huawei China. An out-of-bounds read vulnerability exists in multiple Huawei products, which stems from a program failing to adequately validate input. A remote attacker could exploit the vulnerability by sending a specially crafted signature to t...

Weak Encryption Algorithm Vulnerability in Multiple Huawei Products

Huawei AR120-S and others are router products from Huawei China. A weak cryptographic algorithm vulnerability exists in multiple Huawei products due to the program failing to properly parse the values in a certificate. A remote attacker could exploit this vulnerability to forge RSA signatures wit...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37729)

Huawei AR120-S and others are router products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products due to a program failing to adequately validate some values in a message. A remote attacker could exploit this vulnerability by sending specially crafted SIP message...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37727)

Huawei AR120-S and others are router products from Huawei China. The buffer overflow vulnerability exists in multiple Huawei products and is due to the program failing to adequately verify certificates. A remote attacker could exploit the vulnerability by sending specially crafted certificates to...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37732)

Huawei AR120-S and others are router products from Huawei China. A memory leak vulnerability exists in multiple Huawei products due to a program failing to properly free allocated memory for processing messages. A remote attacker could exploit the vulnerability by sending specially crafted H323...

Multiple Huawei Products Input Checksum Vulnerability

Huawei AR120-S and others are router products from Huawei China. The input validation vulnerability exists in multiple Huawei products due to the program failing to adequately validate input. A remote attacker could exploit this vulnerability by constructing malformed Stream Control Transmission...

Stack overflow

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10,...

CVE-2017-8162

AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10,...

CVE-2017-8162

CVE-2017-8162 is a DoS vulnerability affecting Huawei AR/SRG/NetEngine16EX/SMC2.0/other listed products where malformed message processing allows an authenticated remote attacker to send crafted messages, triggering a stack overflow and rendering the service unavailable. Public documents in conne...