133 matches found
Huawei Data Communication: local-user service-type all or both secure and insecure protocols
When a user account uses both secure and insecure protocols, the insecure protocols will cause password disclosure. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Huawei Data Communication: The length of the peer public key does not meet security requirements
Check whether the peer public key of the RSA, DSA and ECC is too short. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Huawei Data Communication: The protocol inbound ssh port 830 is not configured
Enable the NETCONF dedicated port. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
Huawei Data Communication: SSL is configured with an insecure algorithm
If the cipher-suite-list command contains insecure algorithms, the service that references this rule has security risks. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Huawei Data Communication: No password rule is configured
If the password check policy is disabled, you can configure simple passwords to increase the risk of brute force cracking. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Weak Password Vulnerability in EG2000P of Ruijie Networks Co.
Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG2000P of Ruijie Networks Co. An attacker can exploit this vulnerability to log into the device backend and obtain sensitive information...
Weak Password Vulnerability in 1000C of Ruijie Networks Co.
Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the Ruijie Networks Co. 1000C. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...
Weak Password Vulnerability in NBR2000D of Riptide Networks Inc.
Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR2000D of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...
Weak Password Vulnerability in United Sky Communications Reporter
hereinafter referred to as "Tiangong Network" is a leading data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. A weak password vulnerability exists in t...
Weak password vulnerability exists in Fusion Router K3C
Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. A weak password vulnerability exists in Fusion Router K3C. An attacker can utilize the weak password to...
Information Disclosure Vulnerability in lenovonet Reporting Center
Ltd. "TGN" is a data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. Its predecessor is the R&D team of the Network Division of Lenovo Group, which was...
Information Leakage Vulnerability in Tiangong LFW400E Firewall
hereinafter referred to as "Tiangong Network" is a leading data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. An information leakage vulnerability exis...
Weak password vulnerability in Fusion Router K1 version
Shanghai Fusion Data Communication Technology Co., Ltd. is a technologically innovative company that provides users with intelligent products and cloud services in the field of smart home. A weak password vulnerability exists in the K1 version of Fusion Router. Attackers can utilize the...
Arbitrary File Download Vulnerability in Next-Generation Firewall of Shanghai Boda Data Communication Co.
Next Generation Firewall is a firewall product designed and launched by Shanghai Boda Data Communication Co., Ltd. for medium-sized network security demand scenarios such as enterprises, governments, hotels, hospitals, schools and so on. Shanghai Boda Data Communication Co., Ltd Next Generation...
Information Leakage Vulnerability in Next-Generation Firewall of Shanghai Boda Data Communication Co.
Next Generation Firewall is a firewall product designed and launched by Shanghai Boda Data Communication Co., Ltd. for medium-sized network security demand scenarios such as enterprises, governments, hotels, hospitals, schools and so on. There is an information leakage vulnerability in the Next...
Arbitrary File Read Vulnerability in Fusion Router K3C
Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. An arbitrary file read vulnerability exists in Fusion Router K3C, which can be exploited by attackers t...
Huawei Data Communication: Configuring Secure User Authentication Modes and Permission Levels
Configure user rights in the user-interface VTY view. In password authentication mode, this permission is the actual login permission. In AAA authentication mode, this parameter takes effect if no user rights are configured on the AAA server. Configuring password authentication on the VTY is...
Huawei Data Communication: Disable the security policy of the VTY user interface
Disables the VTY user interface security policy. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei Data Communication: VTY allows Telnet login, which is risky
VTY allows Telnet login, which is risky Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute ...
Huawei Data Communication: Check whether the command line permission is proper
Sets the execution permission of a specified command. If you degrade the permission of a high-privilege command, unauthorized operations may occur. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...