EUVD-2016-9128

Malware in sbrugna...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2016-8280

CVE-2016-8280 is a directory-traversal vulnerability in Huawei eSight prior to V300R003C20SPC005. The flaw allows remote authenticated users to read arbitrary files through unspecified vectors, enabling information leakage. Connected documents confirm affected product (Huawei eSight) and release ...

Huawei eSight Directory Traversal Vulnerability

Huawei eSight is Huawei's next-generation O&M solution for enterprise infrastructure networks, unified communications, telepresence conferencing, video surveillance, and data centers. The solution supports unified monitoring and configuration management of multi-vendor and multi-type devices, as...

Security Advisory - MITM Vulnerability in the OpenSSL Module of Huawei eSight Network

During certificate verification, OpenSSL starting from version 1.0.1n and 1.0.2b will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted...

Huawei eSight User-Defined设备图像上传漏洞

BUGTRAQ ID: 64633 华为eSight是面向企业网的网络管理软件，针对中小企业的典型诉求，特别推出eSight体验版和eSight精简版，通过简单易用的管理系统帮助企业聚焦于关键业务应用，实现无忧网管。 由于程序在处理设备图像上传时未能正确验证文件，这可以被攻击者利用通过一个中间人攻击操纵上传的文件，并随后执行任意代码。 0 Huawei eSight V200R003C01SPC200 Huawei eSight = V200R003C00 厂商补丁： Huawei ----- Huawei eSight V200R003C01SPC200以修复此漏洞，建议用户下载使用：...

Security Advisory-Vulnerability in Image Upload of User-defined Devices to Huawei eSight System

Huawei eSight System is an operation and maintenance system that Huawei develops for next-generation wireless/wired enterprise campus networks, enterprise branches, and data centers. When users adapt new devices for it, the server verifies the format of the files to be uploaded unsuccessfully...