Huawei eSpace 1.1.11.103 DLL Hijacking

/ Huawei eSpace Desktop DLL Hijacking Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC Summary: Create more convenient Enhanced Communications EC services for...

Huawei eSpace 1.1.11.103 Unicode Stack Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Huawei eSpace Meeting cenwpoll.dll Unicode Stack Buffer Overflow with SEH Overwrite Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected application: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpac...

CVE-2018-7960

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensiti...

CVE-2018-7959

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak...

Information disclosure

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensiti...

CVE-2018-7959

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak...

CVE-2018-7960

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensiti...

Authentication flaw

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

Design/Logic Flaw

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak...

CVE-2018-7958

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

CVE-2018-7958

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

CVE-2018-7960

CVE-2018-7960 corresponds to a SRTP icon display vulnerability in Huawei eSpace products. The issue allows an unauthenticated, remote attacker to perform a man-in-the-middle attack on non-secure transmission, potentially intercepting and tampering with call information and causing sensitive infor...

CVE-2018-7960

There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensiti...

CVE-2018-7959

There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak...

CVE-2018-7958

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

CVE-2018-7958

CVE-2018-7958 affects Huawei eSpace products (eSpace/7950 series as described in CNVD/CVE listings). Description: an anonymous TLS cipher suite is supported, enabling an unauthenticated, remote attacker to perform a man-in-the-middle attack and hijack the connection during user sign-up/login over...

CVE-2018-7959

CVE-2018-7959 affects Huawei eSpace. An unauthenticated, remote attacker can perform a man-in-the-middle attack when SRTP is enabled to make a call, intercepting and decrypting call information and potentially leaking sensitive data. The root cause is a short key vulnerability in the SRTP handlin...

Huawei eSace Product Uses Anonymous TLS Algorithmic Sleeve Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. A security vulnerability exists in the Huawei eSace product that uses an anonymous TLS algorithm set. Due to insufficient authentication, an attacker could launch a man-in-the-middle attack to intercept a client's connection...

Huawei eSpace Product SRTP Logo Display Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. A security vulnerability exists in Huawei eSpace products with SRTP logo display. An attacker can launch a man-in-the-middle attack to intercept messages in a non-secure transmission mode. An attacker who successfully...

Huawei eSpace Product Using Short Secret Key Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. The Huawei eSpace product suffers from a security vulnerability using a short secret key. When a user makes a call using SRTP, an attacker can launch a man-in-the-middle attack to intercept and decrypt the call information...