24 matches found
ECHO-A380-E585-5861
Bulletin has no description...
EUVD-2012-5842
Malware in sbrugna...
EUVD-2012-5844
Malware in sbrugna...
EUVD-2012-5843
Malware in sbrugna...
CVE-2012-5970
The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...
CVE-2012-5969
Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to 1 read arbitrary files via a .. dot dot in the PATHINFO of an sdcard/ request or 2 modify arbitrary files via a .. dot dot in the reqpage parameter to en/sms.cgi...
CVE-2012-5968
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...
CVE-2012-5968
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...
CVE-2012-5970
The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...
Directory traversal
Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to 1 read arbitrary files via a .. dot dot in the PATHINFO of an sdcard/ request or 2 modify arbitrary files via a .. dot dot in the reqpage parameter to en/sms.cgi...
Null pointer dereference
The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...
Design/Logic Flaw
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...
CVE-2012-5969
Affected product/impact (as per provided documents): Huawei E585 pocket wifi 2 device suffers multiple directory traversal vulnerabilities (CVE-2012-5969) that allow remote attackers on the LAN side to read files (via .. in PATH_INFO of an sdcard/ request) or modify files (via .. in the req_page ...
CVE-2012-5968
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...
CVE-2012-5970
The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...
CVE-2012-5968
The CVE-2012-5968 issue affects Huawei E585 devices where admin session status is not validated, enabling a LAN-adjacent attacker to obtain user data and session IDs and modify data. The advisory notes remediation via vendor updates Huawei-SA-20121124-1-E585 and Huawei-SA-20121203-1-E585; exploit...
CVE-2012-5970
CVE-2012-5970 affects the Huawei E585 pocket wifi 2 device. The vulnerability is a NULL pointer dereference in the HTTP handling code triggered by crafted requests, leading to a denial of service and device outage. Public documents describe this as part of a set of vulnerabilities in the same dev...
CVE-2012-5969
Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to 1 read arbitrary files via a .. dot dot in the PATHINFO of an sdcard/ request or 2 modify arbitrary files via a .. dot dot in the reqpage parameter to en/sms.cgi...
CVE-2012-5970: Undefined Security Weakness
The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...
CVE-2012-5968: Improper Input Validation
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...