Huawei eSpace Product SRTP Logo Display Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. A security vulnerability exists in Huawei eSpace products with SRTP logo display. An attacker can launch a man-in-the-middle attack to intercept messages in a non-secure transmission mode. An attacker who successfully...

Huawei eSpace Product Using Short Secret Key Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. The Huawei eSpace product suffers from a security vulnerability using a short secret key. When a user makes a call using SRTP, an attacker can launch a man-in-the-middle attack to intercept and decrypt the call information...

Huawei eSace Product Uses Anonymous TLS Algorithmic Sleeve Vulnerability

Huawei eSpace 7950 is a 7950 series IP phone product from Huawei, China. A security vulnerability exists in the Huawei eSace product that uses an anonymous TLS algorithm set. Due to insufficient authentication, an attacker could launch a man-in-the-middle attack to intercept a client's connection...

CVE-2017-17222

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

Remote code execution

Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...

CVE-2017-17223: Improper Limitation of a Pathname to a Restricted Directory

Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload an...

PT-2018-6454

Name of the Vulnerable Software and Affected Versions: Huawei eSpace 7910 version V200R003C30 Huawei eSpace 7950 version V200R003C30 Huawei eSpace 8950 versions V200R003C00 through V200R003C30 Description: The issue allows an authenticated, remote attacker to exploit a directory traversal...

PT-2018-6452

Name of the Vulnerable Software and Affected Versions: Huawei eSpace 7950 version V200R003C30 Huawei eSpace 8950 version V200R003C00 Description: The issue allows an authenticated, remote attacker to execute arbitrary code on the affected products. This is possible due to insufficient verificatio...

PT-2018-6453

Name of the Vulnerable Software and Affected Versions: Huawei eSpace 7950 version V200R003C30 Huawei eSpace 8950 version V200R003C00 Description: The issue allows an authenticated, remote attacker to execute arbitrary code on the affected products. This is possible due to insufficient verificatio...

CVE-2017-17222: Improper Input Validation

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

CVE-2017-17221: Improper Input Validation

Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability (CNVD-2018-02550)

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

CVE-2015-8231: Undefined Security Weakness

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service device restart via unspecified packets...

PT-2016-3870

Name of the Vulnerable Software and Affected Versions Huawei eSpace 7910 and 7950 IP phones versions prior to V200R002C00SPC800 Description The issue allows remote attackers with established sessions to cause a denial of service, resulting in a device restart, via unspecified packets...