EUVD-2015-7739

Malware in sbrugna...

CVE-2015-7842

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 wi...

CVE-2015-7842

CVE-2015-7842 affects Huawei FusionServer family (RH2288/RH2288H/RH2288A/RH1288/RH8100/XH628/CH222/CH220/CH121 etc.) where software before specific V100R00xC00SPCyyy versions fails to verify user permissions, allowing remote authenticated operators to change server information. The issue is trigg...

CVE-2015-7842

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 wi...

CVE-2015-7841

The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

CVE-2015-7843

The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

Command injection

The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

Input validation

The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

CVE-2015-7843

The CVE-2015-7843 issue affects Huawei FusionServer management interfaces where the login module does not limit the number of query attempts. This allows remote authenticated attackers to brute-force higher-privilege credentials, enabling access to higher-level user accounts. Affected products in...

CVE-2015-7843

The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

CVE-2015-7841

Huawei FusionServer products (RH2288 V3/HW3 with FW before V100R003C00SPC603, RH2288H V3 before V100R003C00SPC503, XH628 V3 before V100R003C00SPC602, RH1288 V3 before V100R003C00SPC602, RH2288A V2 before V100R002C00SPC701, RH1288A V2 before V100R002C00SPC502, RH8100 V3 before V100R003C00SPC110, C...

CVE-2015-7841

The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before...

Huawei FusionServer Product Information Change Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. A security vulnerability exists in the Huawei FusionServer product that allows a remote attacker to submit a special request to change server information...

Huawei FusionServer Product Security Bypass Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. The Huawei FusionServer product failed to properly limit the number of query attempts, allowing remote attackers to obtain sensitive information via brute force attack...

Huawei FusionServer Product Command Injection Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. A security vulnerability exists in the Huawei FusionServer product that allows remote attackers to submit a special request to change parameters in the login page and inject commands...

Security Advisory - Multiple Vulnerabilities in Huawei FusionServer Products

Multiple security vulnerabilities exist in Huawei FusionServer products. Command injection vulnerability exists in Huawei FusionServer products. An attacker could change the input parameters on the login page and enter commands, such as user creation command. Vulnerability ID: HWPSIRT-2015-06075...