Huawei eSpace IAD Information Disclosure Vulnerability

Huawei eSpace IAD Integrated Access Device is an integrated access device for Huawei's Voice over IP solution. An information disclosure vulnerability exists in Huawei eSpace IAD, which can be exploited by remote attackers to submit a special request to view and download device failure informatio...

Huawei eSpace Meeting Elevation of Privilege Vulnerability

Huawei eSpace Meeting Service is a collaborative meeting solution from Huawei, a Chinese company. The solution integrates voice, video, and data sharing, allowing users to access meetings easily and quickly from a variety of terminals, including telephone terminals, desktop computers, and tablets...

CVE-2016-8789

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

CVE-2016-8789

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

Design/Logic Flaw

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...

Cross site scripting

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

Information disclosure

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2014-3222

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...

CVE-2016-8271

Huawei eSpace IAD information disclosure vulnerability (CVE-2016-8271) affects V300R002C01SPC100 and earlier. The root cause is lack of proper access restrictions on web pages, allowing an attacker to view/download fault information via a special URL. Multiple sources (NVD entry, CNVD, PRION, CVE...

CVE-2014-3222

Huawei eSpace Meeting contains a local privilege escalation flaw in V100R001C03SPC201 and earlier versions where attackers with ordinary user permissions can elevate privileges to access and set specific key resources. Multiple sources (NVD/CNVD/China CNVD and Huawei advisory HW-329170) describe ...

CVE-2016-8271

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2016-8789

Huawei eSpace IAD (hardware/firmware: V300R001C03, V300R001C04, V300R001C06, V300R001C20, V300R001C07) contains a reflected cross-site scripting (XSS) vulnerability that can be triggered when a user clicks a URL containing malicious scripts. The issue allows an attacker to obtain user information...

CVE-2016-8271: Exposure of Sensitive Information to an Unauthorized Actor

Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...

CVE-2014-3222: Undefined Security Weakness

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...

CVE-2016-8789: Improper Neutralization of Input During Web Page Generation

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

Reflective Cross-Site Scripting Vulnerability in Huawei eSpace IAD Products

Huawei eSpace IAD is an integrated access device for Voice over IP and Unified Communications solutions from Huawei, China. A reflective cross-site scripting vulnerability exists in the Huawei eSpace IAD product. An attacker can exploit the vulnerability to run a malicious script in a user's...

Security Advisory - XSS Vulnerability in Huawei eSpace IAD

Huawei eSpace Integrated Access Device IAD has a reflected cross-site scripting XSS vulnerability. An attacker could trick a user into clicking a URL containing malicious scripts. Then the user's browser may receive a response from the eSpace IAD and execute the malicious scripts. Successful...