EUVD-2015-8547

Malware in sbrugna...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter version V100R001C10, which stems from the program's lack of legitimacy checking of incoming device information data. An attacker can exploit this vulnerability to...

Huawei LogCenter Authentication Bypass Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. An authentication bypass vulnerability exists in Huawei LogCenter that could allow an authenticated attacker to use tools to tamper with requests and submit requests to the server for elevated privileges that could affect...

Privilege escalation

Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions...

Denial of service

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...

CVE-2015-8671

Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions...

CVE-2015-8670

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...

CVE-2015-8671

Huawei LogCenter V100R001C10 contains an authentication-based privilege-escalation vulnerability where an authenticated attacker can tamper with requests using a tool and submit requests to elevate privileges, impacting certain system functions. The issue is associated with CVE-2015-8671. Huawei’...

CVE-2015-8670

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service...

CVE-2015-8670

Huawei LogCenter (V100R001C10) is affected by CVE-2015-8670 due to lack of legitimacy checking of incoming device information, allowing an authenticated attacker to add abnormal device data to the log collection module and cause a denial of service. The vulnerability impacts the log collection co...

CVE-2015-8671

Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter. An attacker could exploit this vulnerability to cause the application to deny service to legitimate users...

Huawei LogCenter Elevation of Privilege Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. An elevation of privilege vulnerability exists in Huawei LogCenter. An attacker can exploit this vulnerability to obtain elevated privileges and perform unauthorized operations...

Security Advisory - DoS Vulnerability in Huawei LogCenter

Huawei LogCenter has a DoS vulnerability. After login to the LogCenter, an attacker can add abnormal device information to the log collection module. The LogCenter system does not verify input device information. As a result, the log collection module denies services. Vulnerability ID:...

Security Advisory - Privilege Escalation Vulnerability in Huawei LogCenter

Huawei LogCenter has a privilege escalation vulnerability. After login to the LogCenter, a low privileged attacker can tamper with requests using a tool and submit the request to the server for privilege escalation, affecting some system functions. Vulnerability ID: HWPSIRT-2015-09020 This...