Huawei Data Communication: Weak Algorithm Vulnerability in Some Huawei Products (huawei-sa-20200108-01-rsa)

There is a weak algorithm vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Huawei Data Communication: Multiple Vulnerabilities Released on Microsoft security advisory 4025685 (huawei-sa-20170909-01-windows)

Microsoft had released a Security Advisory 4025685 on June 14 to fix multiple critical security vulnerabilities in such systems as Microsoft Windows XP, Windows Server 2003, Windows VISTA, and Windows 8. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Huawei Data Communication: RCE Vulnerability in Microsoft Windows Print Spooler Service (huawei-sa-20171222-01-windows)

Microsoft released a security bulletin MS10-061 to publicly disclose a remote code execution RCE vulnerability in the Print Spooler service. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from ...

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

Authentication flaw

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

CVE-2020-1864

CVE-2020-1864 affects Huawei Secospace AntiDDoS8000 series (V500R001C00, V500R001C20, V500R001C60, V500R005C00). Root cause is improper authentication implementation that allows a remote attacker to obtain information and forge the peer device to send specific packets, enabling connection to the ...

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

CVE-2020-1864: Improper Authentication

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

PT-2020-2665

Name of the Vulnerable Software and Affected Versions Secospace AntiDDoS8000 versions V500R001C00 through V500R005C00 Description The issue is related to improper authentication in some Huawei products, allowing a remote attacker to execute arbitrary commands by forging the peer device and sendin...

Huawei Data Communication: DoS Vulnerability in Some Huawei Products (huawei-sa-20191204-02-dos)

Some Huawei products have a DoS security vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2019-5254: Out-of-bounds Read

Certain Huawei products AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 have an out-of-bounds read vulnerability. An attacker who logs in to the board...

CVE-2019-5256: NULL Pointer Dereference

Certain Huawei products AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 have a null pointer dereference vulnerability. The system dereferences a pointe...

PT-2019-17537

Name of the Vulnerable Software and Affected Versions Huawei AP2000 affected versions not specified Huawei IPS Module affected versions not specified Huawei NGFW Module affected versions not specified Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified...

PT-2019-17538

Name of the Vulnerable Software and Affected Versions Huawei AP2000 version affected versions not specified Huawei IPS Module version affected versions not specified Huawei NGFW Module version affected versions not specified Huawei NIP6300 version affected versions not specified Huawei NIP6600...

Huawei Data Communication: Memory Leak Vulnerability in Some Huawei Products (huawei-sa-20191023-01-memory)

Some Huawei products have a memory leak vulnerability when handling some messages. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

Memory corruption

Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, which may further lead to system exceptions...

CVE-2017-17164: Missing Release of Resource after Effective Lifetime

Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacker could exploit it to cause memory leak, which may further lead to system exceptions...

Huawei Secospace AntiDDoS8000 Memory Leak Vulnerability

Huawei Secospace AntiDDoS8000 is a firewall product from Huawei, China. A memory leak vulnerability exists in Huawei Secospace AntiDDoS8000 V500R001C20SPC500 version, which is due to the program failing to properly free memory. An attacker could exploit this vulnerability to cause a device anomal...

PT-2017-14741

Name of the Vulnerable Software and Affected Versions Huawei Secospace AntiDDoS8000 version V500R001C20SPC500 Description The issue is caused by a memory leak that occurs when the system opens certain functions, resulting in memory not being released. This can be exploited by an attacker to cause...