Huawei P30 and P30 Pro Denial of Service Vulnerability

The Huawei P30 and Huawei P30 Pro are both smartphones from the Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei P30 prior to version 10.1.0.160 C00E160R2P11 and Huawei P30 Pro prior to version 10.1.0.160 C00E160R2P8, which stems from a failure to properly...

Cisco Data Center Network Manager Improper Authorization (cisco-sa-dcnm-improper-auth-7Krd9TDT)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability in the REST API due to insufficient authorization of certain API functions. An attacker can exploit this vulnerability by sending a crafted request to the API using...

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Automation License Manager ALM Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to locally escalate privileges and modify...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

Authorization

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

The CVE-2020-9245 entry concerns Huawei P30 and P30 Pro smartphones (versions affected prior to 10.1.0.160) with a denial-of-service vulnerability caused by improper authorization. The issue can be triggered by tricking a user into installing and running a malicious app, potentially causing a DoS...

PT-2020-20541

Name of the Vulnerable Software and Affected Versions HUAWEI P30 versions earlier than 10.1.0.160C00E160R2P11 HUAWEI P30 Pro versions earlier than 10.1.0.160C00E160R2P8 Description The issue allows for a denial of service condition due to improper authorization, enabling an attacker to modify...

CVE-2020-9245: Undefined Security Weakness

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-1748

A flaw was found in Wildfly, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources...

CVE-2020-9248

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...

Authorization

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...

CVE-2020-9248

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...

PT-2020-20544

Name of the Vulnerable Software and Affected Versions Huawei FusionComput version 8.0.0 Description The issue is related to improper authorization. A module fails to correctly verify some input, resulting in the authorization of files with incorrect access. This can be exploited to launch a...

CVE-2020-9248: Undefined Security Weakness

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...

CVE-2020-3374: Improper Authorization

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The...

CVE-2020-3386: Improper Authorization

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of certain API functions...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities affecting multiple products. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...