EUVD-2014-8962

Malware in sbrugna...

CVE-2014-9137: Cross-Site Request Forgery (CSRF)

Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack...

CVE-2016-8276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Point-to-Point Protocol over Ethernet PPPoE module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600, when CHAP authentication is configured on the server, allows remote attackers to cause a denial of service...

CVE-2016-6669: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Authentication, Authorization and Accounting AAA module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet...

PT-2016-7472

Name of the Vulnerable Software and Affected Versions Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways versions prior to V300R001C10SPC600 Description The issue is related to a buffer overflow in the Point-to-Point Protocol over Ethernet PPPoE module when Challenge Handshak...

PT-2016-7030

Name of the Vulnerable Software and Affected Versions Huawei USG2100, USG2200, USG5100, and USG5500 versions prior to V300R001C10SPC600 Description The issue is related to a buffer overflow in the Authentication, Authorization and Accounting AAA module. A remote attacker can send crafted Enterpri...

CVE-2015-8084: Improper Input Validation

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service reboot via crafted DHC...

PT-2015-7722

Name of the Vulnerable Software and Affected Versions Huawei USG5500 versions prior to V300R001C10SPC600 Huawei USG2100 versions prior to V300R001C10SPC600 Huawei USG2200 versions prior to V300R001C10SPC600 Huawei USG5100 versions prior to V300R001C10SPC600 Description The issue allows remote...

PT-2014-8844

Name of the Vulnerable Software and Affected Versions Huawei USG9500 versions V200R001C01SPC800 and earlier Huawei USG2100 versions V300R001C00SPC900 and earlier Huawei USG2200 version V300R001C00SPC900 Huawei USG5100 version V300R001C00SPC900 Description The issue allows an unauthenticated, remo...