EUVD-2020-30037

Malware in sbrugna...

CVE-2020-9208

There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information leak...

Huawei ManageOne CSV Injection Code Execution

The vulnerability of Huawei ManageOne, iManager NetEco, and iManager NetEco 6000 management systems lies in the absence of neutralization of certain elements in the CSV file. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

Design/Logic Flaw

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product version...

Input validation

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2021-37131

CVE-2021-37131 is a CSV injection vulnerability affecting Huawei iManager NetEco (and related products) stemming from insufficient input validation of certain parameters, enabling an attacker with high privileges to inject CSV data into the target device through specific operations. Public disclo...

CVE-2021-37131: Improper Neutralization of Formula Elements in a CSV File

There is a CSV injection vulnerability in ManageOne, iManager NetEco and iManager NetEco 6000. An attacker with high privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

PT-2021-21526

Name of the Vulnerable Software and Affected Versions iManager NetEco versions V600R010C00CP2001 through V600R010C00SPC300 iManager NetEco 6000 versions V600R009C00SPC100 through V600R009C00SPC210 Description There is a signature management issue in some Huawei products. An attacker can forge a...

PT-2021-7547

Name of the Vulnerable Software and Affected Versions ManageOne affected versions not specified iManager NetEco affected versions not specified iManager NetEco 6000 affected versions not specified Description The issue is related to a CSV injection vulnerability. An attacker with high privilege m...

CVE-2020-9208

There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information leak...

CVE-2020-9208

There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information leak...

CVE-2020-9208

CVE-2020-9208 affects Huawei’s iManager NetEco 6000, version V600R021C00. A module lacking authentication enables an information disclosure vulnerability exposed over the network. NVD reports CVSSv3.1 base score 6.5 (PR:L, C:H, I:N, A:N) and CVSSv2 base score 4.0 with partial confidentiality impa...

PT-2020-20524

Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00 Description The issue is related to an information leak due to a lack of authentication in a module. Attackers without access to the module can exploit this to obtain extra information. Recommendations...

CVE-2020-9208: Missing Authentication for Critical Function

There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information leak...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

Input validation

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9200

The CVE-2020-9200 issue affects Huawei iManager NetEco 6000 (V600R021C00). The root cause is insufficient input validation during CSV-related operations, enabling a CSV injection vulnerability in the target device. Exploitation is characterized as a local attack with low privileges and no user in...