Digital Signature Checksum Bypass Vulnerability in Multiple Huawei Products

The Huawei AR1200, among others, is an enterprise router from Huawei, a Chinese company. A security vulnerability exists in multiple Huawei products, which stems from the program failing to properly verify the digital signature of the mirroring software. A local attacker could use this...

CVE-2017-17258

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

The vulnerability of the SCTP message verification mechanism in Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers allows a hacker to trigger a system reboot.

The vulnerability of the SCTP message verification mechanism in microprogramming software for Huawei AR3200, Huawei AR1200, and Huawei AR120-S routers is caused by a full integer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot using a specially craft...