96 matches found
CVE-2017-15344
CVE-2017-15344 affects Huawei AR3200-series routers running software versions V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, or V200R008C30. The vulnerability is an integer overflow caused by insufficient validation of certain fields in SCT...
CVE-2017-17287
The CVE-2017-17287 issue affects a broad set of Huawei devices (AR/AR1200, AR150/AR160/AR200 families, NetEngine16EX, SRG/SRG-like series, etc.) and is tied to an out-of-bounds read triggered by insufficient input validation when processing crafted signatures. The vulnerability allows a remote, u...
CVE-2017-15341
The CVE-2017-15341 issue affects Huawei AR3200 (V200R008C20/V200R008C30) and TE40/TE50/TE60 platforms (V600R006C00). The root cause is improper decoding of X.509 certificates, enabling a remote unauthenticated attacker to trigger a denial of service on the device. Public references indicate DoS i...
CVE-2017-17298
CVE-2017-17298 is a buffer overflow vulnerability affecting a wide range of Huawei router and enterprise devices (e.g., AR120-S, AR1200, AR150/AR160/AR200/AR2200 families, ViewPoint, and others) caused by insufficient validation of certificates. An unauthenticated, remote attacker can send specia...
CVE-2017-15343
Huawei AR3200 Series Enterprise Router models running V200R006C10/V200R006C11/V200R007C00/V200R007C01/V200R007C02/V200R008C00/V200R008C10/V200R008C20/V200R008C30 are affected by an integer overflow vulnerability in SCTP message field validation. A remote, unauthenticated attacker could send a cra...
CVE-2017-17299
CVE-2017-17299 affects multiple Huawei router-like devices (e.g., AR120-S/AR1200/AR150/AR160/AR200/AR2200/AR3200/AR3600/AR510, IPS/NIP/NetEngine16EX, and related models) where an unauthenticated, remote attacker can establish via crafted IKEv2 messages due to insufficient input validation. The un...
CVE-2017-17292
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...
CVE-2017-17294
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...
CVE-2017-15343
Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messages, a remote unauthenticated attacker coul...
Huawei AR3200 and NGFW Module Memory Disclosure Vulnerability
Huawei AR3200 and NGFW Module are both products of Huawei, China.Huawei AR3200 is an AR3200 series enterprise router product.NGFW Module is a firewall product. A memory leak vulnerability exists in the Huawei AR3200 and NGFW Module due to the device failing to reasonably free memory when parsing ...
Huawei AR3200 Buffer Overflow Vulnerability
Huawei AR3200 Series Enterprise Router is a new generation of network products launched by Huawei. The Huawei AR3200 suffers from a buffer overflow vulnerability, which is due to the device failing to adequately verify certain fields in SCTP messages. An attacker successfully exploited the...
Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-35588)
Huawei AR3200 is a new generation network product from China's Huawei Huawei.Huawei TE40/50/60 is an HD video conferencing endpoint that supports 1080p60. The denial of service vulnerability in multiple Huawei products is due to a problem with the device decoding X.509 certificates. A remote...
Stack overflow
AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10,...
CVE-2017-8162
AR120-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR1200 with software V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30,AR1200-S with software V200R006C10, V200R007C00, V200R008C20, V200R008C30,AR150 with software V200R006C10,...
CVE-2017-8162
CVE-2017-8162 is a DoS vulnerability affecting Huawei AR/SRG/NetEngine16EX/SMC2.0/other listed products where malformed message processing allows an authenticated remote attacker to send crafted messages, triggering a stack overflow and rendering the service unavailable. Public documents in conne...
CVE-2015-7846
CVE-2015-7846 affects Huawei S7700/S9700/S9300 series and AR200/AR1200/AR2200/AR3200 devices, where physical access to the CF card can disclose sensitive information. Root cause: data exposure via CF card contents when accessed locally. Affected products require upgrading to: S7700/S9700/S9300 to...
CVE-2016-8797
The CVE-2016-8797 entry describes a memory exhaustion issue in Huawei devices caused by abnormal MPLS packets processed by the MPLS module. Affected products include Huawei AR3200 and several S-series switches (S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700) with listed software versions...
CVE-2016-8797
Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V200R008C00, V200R007C00; S5300 with software V200R008C00, V200R007C00, V200R006C00; S5700 with software V200R008C00, V200R007C00, V200R006C00; S6300 with software V200R008C00, V200R007C00; S6700 with software...
