CVE-2020-9199

B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9199

CVE-2020-9199 affects Huawei B2368-22, B2368-57, and B2368-66 devices (V100R001C00) and is due to insufficient input validation that allows command injection when an attacker with high privileges performs LAN-based operations. The vulnerability enables injection of commands to the target device, ...

CVE-2017-8156

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow t...

Authentication flaw

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on a certain port. After accessing the network between the indoor and outdoor units of the CPE, an attacker can deliver commands to the specific port of the outdoor unit and...

Memory corruption

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a...

CVE-2017-8201

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit could cause a...

CVE-2017-8155

The CVE-2017-8155 entry describes an unauthenticated access flaw in the outdoor unit of Huawei B2338-168 CPE. The issue arises from no authentication on a specific port (serial port access) between the indoor and outdoor units, enabling an attacker to deliver commands to the outdoor unit without ...

Huawei E9000 Chassis XML External Entity Injection Vulnerability

The Huawei E9000 Chassis is a blade server from Huawei, a Chinese company. An XML external entity injection vulnerability exists in Huawei E9000 Chassis version V100R001C00. An attacker could exploit this vulnerability to obtain sensitive information and possibly cause a denial of service...